RE: Locate wifi client

["Graszka Piotr" <P_Graszka () compfort pl>]

Hi,

You have same methods to monitoring WiFi clients. You can use:

1. NAC - network access control - any open source.
2. NBAD - network behavior anomaly detection  - is  lot of   solutions
based on netflows, sflows - P2P traffic based on traffic analysis not on
signatures.
3. RSA Netwitness - you can find any open solution  similar to RSA
Netwitness - network forensic tool like opensource NetworkMiner.

Regards
Piotr G.

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Tracy Reed
Sent: Wednesday, October 09, 2013 8:10 PM
To: Robert Larsen
Cc: security-basics () securityfocus com
Subject: Re: Locate wifi client

On Wed, Oct 09, 2013 at 09:32:36AM PDT, Robert Larsen spake thusly:
> Anybody knows about hardware/software used for locating a wifi client?
> Somebody is downloading torrents at full speed on our network and 
> nobody will admit it (or simply stop), and we really don't want to 
> restrict network usage since there are many legal stuff on torrent 
> sites too so is there a way of finding a client with a specific mac
address?

How many people can legitimately your wifi? Do you run an open network?
If so it could be someone who doesn't even belong to your organization.

Can you see the IP address of the person doing the downloading? Do you
have a DHCP server which can tell you which MAC that was assigned to?
Even some of the cheap WAPs will show the dhcp mac/ip table.

Do you have a list of the MAC addresses assigned to everyone? If you
don't, Change the wifi password. Give the new password out only after
you have recorded each person's MAC address. Then you should be able to
track down offenders.

-- 
Tracy Reed, RHCE     Digital signature attached for your safety.
Copilotco            PCI/HIPAA/SOX Compliant Secure Hosting
866-MY-COPILOT x101  http://copilotco.com

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------