Security Incidents mailing list archives

RE: Wireless router behaviour


From: "David Gillett" <gillettdavid () fhda edu>
Date: Thu, 9 Sep 2004 15:36:09 -0700

From: jamesworld () intelligencia com 
[mailto:jamesworld () intelligencia com]

That is common. Seen it on a variety of "bridge type"  router devices.

  I hadn't seen it before.  Several private respondents have also
reported it as common.
  Combined with port statistics captured by our switch, that gives
us a rough estimate of when it was installed -- which tends to 
discredit the theory that it was a merely unauthorized device being 
exploited by a third party.
 
  It's in the hands of law enforcement now, who are unlikely to allow 
me to perform additional forensics on it.

Dave Gillett



Current thread: