Snort mailing list archives
Re: Wireless access point detection
From: Andrew Lockhart <andrew () ingsoc net>
Date: 15 Jul 2003 13:44:58 -0600
On Tue, 2003-07-15 at 12:35, Elkind_Rob () emc com wrote:
Has anyone written any rules to detect rogue wireless access points that they would like to share? I'd like to compare results from snort with the nessus scans I have looking for WAPs. Thanks, -Rob
I've written a preprocessor to detect rogue WAPs and AdHoc networks. It seems to work pretty well, but I haven't had time to do extensive testing. So, if you're interested drop me a line. I do plan on releasing it eventually, but it's just one of several preprocessors I'm writing for 802.11 stuff. -- Andrew Lockhart <andrew () ingsoc net> ------------------------------------------------------- This SF.Net email sponsored by: Parasoft Error proof Web apps, automate testing & more. Download & eval WebKing and get a free book. www.parasoft.com/bulletproofapps1 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Wireless access point detection Elkind_Rob (Jul 15)
- Re: Wireless access point detection Andrew Lockhart (Jul 15)
- Re: Wireless access point detection Andrew Lockhart (Jul 16)
- Re: Wireless access point detection Andrew Lockhart (Jul 16)
- <Possible follow-ups>
- Re: Wireless access point detection Chris Waters (Jul 17)
- Re: Wireless access point detection Andrew Lockhart (Jul 15)