While running airodump-ng in town, I have noticed an unusual type of AP or pseudo-AP. There is a steady stream of wireless beacon frames coming in on channel 6. The frames are valid, but have several odd characteristics:
- The destination MAC is broadcast (FF:FF:FF:FF:FF:FF) while the BSSID and source MAC are zeroed out (00:00:00:00:00:00).
- There is no ESSID
- The signal strength is relatively steady and is on par with neighboring networks, which leads me to believe this is a device in a nearby building.
- The speed at which these frames come in is odd. While most of the neighboring networks send out beacons at a steady rate of 10 packets per second, this one triples that rate, coming in at about 30 packets per second.
Has anyone come across this before? Do you think it is most likely faulty drivers or is this a known behavior of some device?
(If you would like to see an example of a packet, check out this one minute dump, filtered by BSSID.)