Packet floods

[mmolyneux]

Hi.

I've just started to look at Air Marshal and I'm seeing HUGE amounts of single-source & multi-source packet floods. (see image below for a small sample from both air marshal and the logs). Might not be a simple answer... but am I being attacked!?

[PhilipDAth]

Yes, I would say it is an attack looking at the messages.  There are a large number of beacon and probe packets.

https://documentation.meraki.com/MR/Monitoring_and_Reporting/Common_Wireless_Event_Log_Messages#Air_...

You are unlikely to be able to do much about it.