Improper broadcast packet

WiFi Manager raises this alarm when it finds a wireless device inject a non-broadcast packet to the broadcast address.

What can be the probable reasons for this ?

Under normal circumstances there is no need to send a non-broadcast packet to the broadcast address. So, this may indicate some kind of attack.

• An Attacker may be trying to inject packets into the WLAN to launch some DoS attack.
• An Attacker to find details about the devices in the WLAN may inject packet into the broadcast address. As broadcast of 802.11 frames is typically done to mark the presence of a device or to request association.

Rogue client injecting invalid broadcast packets

What should the WLAN Administrator do ?

WiFi Manager monitors unwanted broadcasting attempts in the WLAN and alert the operator. Clients that send such broadcasts should be located and analyzed properly as they could be injecting malicious packets on the network to disrupt it.