zdroamers script: find top roamers in ruckus syslog info (and more!)
Install this script under the name /var/log/zdroamers on your linux syslog box. It will tell you what devices are roaming between APs the most
WARNING: This script has many features. There are probably many ways to break it. Don't expect perfection.
/var/log# ./zdroamers --help Usage: ./zdroamers [OPTIONS] [<var/log/messagefile>] Produce a list of client MAC addresses sorted by number of "roaming event" log entries (or use options to dump raw log information) note: there are 2 log entries per roaming event OPTIONS: --help -? -h --controller <controlleraddress> ;# filter on the IP of the specified controller --client <mac:ad:dr:es:s> ;# filter on client mac address --highlight ;# make "--client" option highlight mac addresses, not filter them --maxoui <n> ;# set the number of roam messages that triggers an oui lookup --nslookup ;# if --maxoui was specified, attempt to nslookup the clients --ap <mac:ad:dr:es:s> ;# filter on AP mac address --detail ;# output raw (colorized) data instead of counting roaming lines per MAC --last <linecount> ;# only use the last "linecount" number of lines from "messages" --now ;# only report on new log entries as they are received. implies "--detail" option --debug ;# turn on debugging output