Getting a ton of messages this morning about this MAC address, which is a Nook device. I want to make sure I am reading this right. These messages indicate that Nook device is receiving probe req frames from an AP other than mine? Unfortunately most of the APs at this site are legacy AP20 and don't support remote packet capture, and involving on-site resources would be a pain.
Event Type: L2DoS
Trap Type: Threshold Crossing
Device ID: 00197700xxxx
Device Name: [ access point X ]
Time: 01-22-2015 07:21:14
Message: [wifi]: L2 DoS: interface wifi0.1 station 58:67:1a:47:58:d6: receiving probe req frames exceed 1200 PPM.