Re: Wireless LAN detection

["Talisker" <offthecuff () lineone net>]

Ron
I recently included a page on my website with wireless security tools
http://www.networkintrusion.co.uk/wireless.htm
There are a plethora of tools out there for your task, the simplest method
is using netstumbler with a GPS feeding into MS MapPoint that way you don't
need to carry out an overt check just carry your laptop/pda in a bag and war
around.  The result will be a streetmap with color points  signifying signal
strength.  It is very easy to ascertain the approximate location of the
Access Point, local investigation with a parabolic antenna will home in on
the offending AP still further.

Hope this helps
take care
-andy
Taliskers Network Security Tools
http://www.networkintrusion.co.uk
Taliskers Network Security Tools
http://www.networkintrusion.co.uk
----- Original Message -----
From: "Ron Yorgason" <rony () nexsel com>
To: "Boschmann, Armin" <aboschmann () hydro mb ca>;
<security-basics () lists securityfocus com>
Sent: Monday, December 09, 2002 9:08 PM
Subject: RE: Wireless LAN detection


> There is a free 1 hour Web Seminar coming up on December 12, 2002.
> Securing wireless networks:  A best practices approach
>
> If you are interested in attending please email for more information
> as attendance is very limited  mailto:rony () nexsel com
>
> Have a great day, Ron
>
> Helping you in Defending, Enhancing, and Maintaining your Voice and Data
> Interactions.
>
>
>
> Toll free:  1-866-NEXSEL4 (639-7354) ext 1103
>
>
>
>
> -----Original Message-----
> From: Boschmann, Armin [mailto:aboschmann () hydro mb ca]
> Sent: Friday, December 06, 2002 11:45 AM
> To: 'security-basics () lists securityfocus com'
> Subject: Wireless LAN detection
>
>
> We have a policy of no-wireless at our sites.  I want to audit this
policy,
> similar to war-dialing, or more correctly war-driving.
>
> My thinking is to find illegal wireless equipment in realtime.  My concern
> is insiders (temporary employees, contractors, 'bad' employees) plugging
in
> a wireless access point, then accessing our network from the street, then
> disconnecting.  So I am envisioning a computer with a wireless receiver
that
> will look for TCP/IP traffic, and tell me if it detects communications to
> any of our computers.
>
> I can see several problems, such as distinguishing between our 192.168.x.x
> addresses and those on WLANs of our neighbors.  Also I would have to
harden
> the wireless detection computer, and ideally not connect it to our network
> at all yet have some means of notifying me (pager, cell modem).
>
> Does anyone know of a product that does this?  Or if you think my approach
> is suspect, suggest another one?
>
>
> Armin Boschmann
> aboschmann () hydro mb ca
> Manitoba Hydro