RE: Finding Wireless AP's on your network

["Hayes, Ian" <Ian.Hayes () wynnlasvegas com>]

> -----Original Message-----
> From: Warren, John [mailto:John.B.Warren () txgt com]
> Sent: Wednesday, April 19, 2006 12:09 PM
> To: security-basics () securityfocus com
> Subject: Finding Wireless AP's on your network
>
>
> What would be the best way to locate wireless devices on a remote
> network? Some of these sites are hundreds of miles away from me, so
it's
> not feasible to detect them via normal methods (i.e., airsnort,
kismet,
> etc). Is there a way that I can easily tell if one is plugged into one
> of the switches at the remote location?

I'll make a couple of assumptions here, so this may not reflect reality
in your situation:

Assuming you have one PC manufacturer, you can search your MAC tables
for either martian MACs, or target specifically on OUIs assigned to the
big AP manufacturers such as Linksys, Netgear and D-Link.

If your network is set up 1 client per port, you can look and see if you
have multiple MACs coming in off of a single port that isn't your trunk.

--
Ian Hayes | Senior Systems Engineer
Wynn Las Vegas
3131 South Las Vegas Blvd, Las Vegas, NV 89109
Ph (702) 770-3252 | Cell (702) 266-6002
Ian.hayes () wynnlasvegas com


-------------------------------------------------------------------------
This List Sponsored by: Webroot

Don't leave your confidential company and customer records un-protected.
Try Webroot's Spy Sweeper Enterprise(TM) for 30 days for FREE with no
obligation. See why so many companies trust Spy Sweeper Enterprise to
eradicate spyware from their networks.
FREE 30-Day Trial of Spy Sweeper Enterprise

http://www.webroot.com/forms/enterprise_lead.php
--------------------------------------------------------------------------