IDS mailing list archives

Re: Wired detection of rogue access points


From: krymson () gmail com
Date: 19 Mar 2007 20:47:12 -0000

Unless there is a backbone to a wireless network passing over your ethernet lines, you really won't be able to 
specifically detect a wireless AP on your network. You could just detect for rogue systems/MACs if you track that kind 
of stuff. A rogue WAP just looks like any old rogue system.

Your best bet is a laptop with a wireless adapter running a *nix version and kismet. That way you can just turn it on, 
see if you can detect wireless networks in your area, and investigate.

Get the MAC of the APs and see if you can find that MAC on your network.


<- snip ->
Can anyone point me to a wired LAN scanner/sniffer that detects wireless access points connected to the LAN?

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------


Current thread: