sawtooth bitrate success graph

  • 1
  • Question
  • Updated 4 years ago
  • Answered
Any idea what would be causing this sort of result? It coincides with significant connectivity disruption for our users. 
Photo of J. Goodnough

J. Goodnough, Champ

  • 266 Posts
  • 32 Reply Likes

Posted 4 years ago

  • 1
Photo of Mike Kouri

Mike Kouri, Official Rep

  • 1030 Posts
  • 271 Reply Likes
Purely guessing, but it looks pretty regular in timing for the worst two hours, could you have had a rogue AP or malicious client trying to jam your AP to force attached clients to roam to something else (like their AP)? Any corresponding log entries from that timeframe?
Photo of J. Goodnough

J. Goodnough, Champ

  • 266 Posts
  • 32 Reply Likes
I think the most likely scenario would be some sort of badly behaving client. While I never want to ignore the possiblity of attack, I feel that it's generally unlikely in our environment. I do keep detailed logs of everything except amrp proxy messages, I can dig those out.

edit - over the approximate time frame we're looking in the ballpark of 4.5K log entries
(Edited)
Photo of J. Goodnough

J. Goodnough, Champ

  • 266 Posts
  • 32 Reply Likes
Mike, I've gone and created a ticket and referenced this posting - the log data contains many usernames which I'd like to protect. Thanks for the suggestions, and if I get any generally applicable information I'll be sure to keep this thread updated.