Re: Locate wifi client

[Joe Szilagyi <jszilagyi () SonicWALL com>]

I would just like to say that this is the sort of question which long ago led me to sign up for this list. A unique 
issue that can't always be trivially Googled.

You could try to triangulate them with RF but that's tremendously difficult for the unskilled (I'm not sure myself on 
the steps). One option is to probably toss a sniffer on them and start reading their traffic to try to ID the person. 
See which IP address/MAC is doing the torrenting and then try to match up who it is based on their other usage.

Another option would be to simply lock out the offending MAC address from either all torrents, or ALL traffic. If you 
have the option somehow, perhaps redirect all requests from the offending MAC to some static internal web page, saying, 
"This computer has been blocked from all access to XYZ Networks for security violations. Please contact admins () 
yourcompany com as soon as possible." You can then either educate your user or they will quietly stop using that 
computer with the offending MAC. If they start it up again on another machine, keep knocking down MACs on all forms of 
connection. Sooner or later, the user will come to you or give it up.

Joe




From: Robert Larsen <robert () the-playground dk<mailto:robert () the-playground dk>>
Date: Wednesday, October 9, 2013 9:32 AM
To: "security-basics () securityfocus com<mailto:security-basics () securityfocus com>" <security-basics () 
securityfocus com<mailto:security-basics () securityfocus com>>
Subject: Locate wifi client
Resent-From: <security-basics-return-58460-jszilagyi=sonicwall.com () securityfocus 
com<mailto:security-basics-return-58460-jszilagyi=sonicwall.com () securityfocus com>>
Resent-Date: Wednesday, October 9, 2013 11:05 AM

Hi

Anybody knows about hardware/software used for locating a wifi client?
Somebody is downloading torrents at full speed on our network and nobody
will admit it (or simply stop), and we really don't want to restrict
network usage since there are many legal stuff on torrent sites too so
is there a way of finding a client with a specific mac address?

What will I need?

Robert

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------



------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------