RE: Finding Wireless AP's on your network

["Goran Pizent" <goran.pizent () ekobit hr>]

There is no easy way. 

You could ping all hosts in all networks with nmap -sP and through
combination of IP, resolved host name and MAC address find AP's. 
If there is no hostname that is suspicious, and of course AP's manufacturers
have their own MAC address pool (so you can compare addresses with their
pool). Hard work and long shot, I agree...

The other solution would be to use Kismet or Airsnort and small WarDriving
around the building, but then again, what if there are 80 different AP's in
the area? Which one is your potential intruder? One with the strongest
signal? And what if signal is intentionally weakened?


My 2c,
Goran



-----Original Message-----
From: Warren, John [mailto:John.B.Warren () txgt com] 
Sent: Wednesday, April 19, 2006 9:09 PM
To: security-basics () securityfocus com
Subject: Finding Wireless AP's on your network

 
What would be the best way to locate wireless devices on a remote
network? Some of these sites are hundreds of miles away from me, so it's
not feasible to detect them via normal methods (i.e., airsnort, kismet,
etc). Is there a way that I can easily tell if one is plugged into one
of the switches at the remote location?

-------------------------------------------------------------------------
This List Sponsored by: Webroot

Don't leave your confidential company and customer records un-protected. 
Try Webroot's Spy Sweeper Enterprise(TM) for 30 days for FREE with no 
obligation. See why so many companies trust Spy Sweeper Enterprise to 
eradicate spyware from their networks.
FREE 30-Day Trial of Spy Sweeper Enterprise

http://www.webroot.com/forms/enterprise_lead.php
--------------------------------------------------------------------------



-------------------------------------------------------------------------
This List Sponsored by: Webroot

Don't leave your confidential company and customer records un-protected. 
Try Webroot's Spy Sweeper Enterprise(TM) for 30 days for FREE with no 
obligation. See why so many companies trust Spy Sweeper Enterprise to 
eradicate spyware from their networks.
FREE 30-Day Trial of Spy Sweeper Enterprise

http://www.webroot.com/forms/enterprise_lead.php
--------------------------------------------------------------------------