Bugtraq mailing list archives
Re: Tool for Identifying Rogue Linksys Routers
From: Dave Hull <ireadit () gmail com>
Date: Fri, 26 Aug 2005 14:29:11 -0500
If the Linksys devices are DHCP clients themselves, you might be able to use DHCPFingerprint to locate them when they renew their leases. You may want to contact the folks at http://www.packetfence.org. They may have a more comprehensive list of signatures. Also, nmap may work, see http://seclists.org/lists/nmap-dev/2003/Apr-Jun/0010.html for more details. Examining TTLs of packets coming from edge devices may also give you some indication of who's sitting behind an extra hop, though some folks may be savvy enough to tweak this on their workstations to avoid detection. Good luck. On 8/25/05, Martin Mkrtchian <dotsecure () gmail com> wrote:
Dear Group Members We are migrating from Lucent QIP to MetaIP for DHCP services and so far we have had two issues when MetaIP has been implemented for VLAN that has an unauthorized Linksys router giving out IP addresses. Is there a scanning tool out there that can determine if there are unauthorized Linksys (type) routers in a specific VLAN? Your input is appreciated Thank You Martin M http://dotsecure.blogspot.com
-- Dave Hull ireadit () gmail com
Current thread:
- Tool for Identifying Rogue Linksys Routers Martin Mkrtchian (Aug 25)
- Re: Tool for Identifying Rogue Linksys Routers Mike Frantzen (Aug 26)
- Re: Tool for Identifying Rogue Linksys Routers Joshua Wright (Aug 26)
- Re: Tool for Identifying Rogue Linksys Routers Graham Wilson (Aug 26)
- Re: Tool for Identifying Rogue Linksys Routers Volker Tanger (Aug 27)
- Re: Tool for Identifying Rogue Linksys Routers Mike Kershaw (Aug 27)
- Re: Tool for Identifying Rogue Linksys Routers Dave Hull (Aug 26)
- Re: Tool for Identifying Rogue Linksys Routers Tony Rall (Aug 27)
- <Possible follow-ups>
- RE: Tool for Identifying Rogue Linksys Routers Thomas Guyot-Sionnest (Aug 26)
- RE: Tool for Identifying Rogue Linksys Routers Matt Mercer (Aug 26)
- Re: Tool for Identifying Rogue Linksys Routers Paul Halliday (Aug 27)