Unauth or missing data sender

RouterOS General
1

I browsed the forum`s archive, and found that this should be a harmless message, and that the client who is not even associated is sending some data that is kicked ignored. But! In the last 3 or 4 weeks, we experience huge problems on one of our 2.4GHz omni. For the same time (ALL the time) I have this in log:

mar/29/2006 09:33:46 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:33:47 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:33:52 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:33:58 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:33:58 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:34:03 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:34:16 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:34:17 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:34:24 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:34:26 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:34:27 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:34:28 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:34:28 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:34:30 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:34:31 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:34:32 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:34:40 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:34:53 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:34:56 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:35:00 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:35:09 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:35:36 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:35:37 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:35:39 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:35:46 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:35:48 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:35:53 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:35:58 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:36:02 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:36:12 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:36:21 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:36:27 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:36:29 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:36:40 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:36:46 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:36:47 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:36:55 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:37:09 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:37:10 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:37:11 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D   
mar/29/2006 09:37:15 wlan1: unauth or missing data sender, 00:30:4F:1C:23:4D

This continues every few seconds. Is it possible that somebody has forgot his wifi client for 4 weeks and havent noticed the he has no connection at all, OR is the situation that somebody is deliverately interfere, wanting our services to gone unusable?
I also blocked this MAC (in access list) but this MAC has never associated. This trash in log continues even if the MAC is banned.
Any ideas about this issue?

2

One possibility is that you’ve got a customer with a CPE that’s registering with it’s own MAC, but passing LAN traffic through with the original source MAC instead of its MAC. I’ve had customers using Linksys Bridges with custom firmware show this kind of nonsense. While the flood is occuring, disconnect/block one customer radio at a time and see if you notice the flood stop when you block a particular one. You might be able to isolate which customer is causing the problem so you can call them and explain that they’ve been disconnected until they fix their problem.

3

Thank you very much for answer. I will do what you suggest, and will let you know does this solve the problem.