Home
  •  

Cisco Wireless: WEP ICV errors Health Monitor

Jalasoft.Xian.SmartManagementPacks.CiscoWireless.WEPICVErrors.1.1 (AggregateMonitor)

This monitor catches Xian events that notifies when the WEP ICV errors if has changed its state.

Knowledge Base article:

Summary

WEP ICV errors is over threshold.

The number of WEP ICV errors is above the maximum threshold configured in Xian Network Manager 2012.

Causes

Excessive amount of WEP ICV errors due to mismatch in the check sum of transmitted data, probably because of tampering while in transmission. This counter shall increment when a frame is received with the WEP subfield of the Frame Control field set to one and the value of the ICV as received in the frame does not match the ICV value that is calculated for the contents of the received frame. Unlike "hard" CRC errors, ICV errors are "soft" errors that depend on the decryption key. Your WLAN may be perfectly healthy, but if you entered the wrong WEP key in CommView, you will observer many ICV errors. Because of its "softness," packets with ICV errors are, by default, shown in the same color as any other packets. If a frame has a CRC error, detecting an ICV error makes no point. Therefore, CommView never sets the ICV error flag for frames with CRC errors.

Resolutions

The rejection of frames when WEP ICV errors are identified is the desired procedure; if error excess affects optimal performance, WEP configuration could be reconsidered.

Additional

Monitors the WEP ICV errors from an interface on the Cisco Wireless.

Element properties:

TargetJalasoft.Xian.Common.Elements.ThirdParty.Cisco.JsXCiscoWirelessInterfaceElement
Parent MonitorSystem.Health.PerformanceState
AlgorithmWorstOf
CategoryStateCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityMatchMonitorHealth
Alert PriorityLow
Alert Auto ResolveTrue
RemotableTrue
AccessibilityPublic
Alert Message
WEP ICV errors Alert
{0}

Source Code:

<AggregateMonitor ID="Jalasoft.Xian.SmartManagementPacks.CiscoWireless.WEPICVErrors.1.1" Accessibility="Public" Enabled="true" Target="ThirdParty_Cisco!Jalasoft.Xian.Common.Elements.ThirdParty.Cisco.JsXCiscoWirelessInterfaceElement" ParentMonitorID="SystemHealth!System.Health.PerformanceState" Remotable="true" Priority="Normal">

  <Category>StateCollection</Category>

  <AlertSettings AlertMessage="WEPICVErrors_AlertMessage">

    <AlertOnState>Warning</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Low</AlertPriority>

    <AlertSeverity>MatchMonitorHealth</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/Params/Param[3]$</AlertParameter1>

    </AlertParameters>

  </AlertSettings>

  <Algorithm>WorstOf</Algorithm>

</AggregateMonitor>