Re: Wired detection of rogue access points

["Tim Holman" <tim_holman () hotmail com>]

Not at all - if you use the LAN based component of the Airtight unit to send 
packets to all the MAC addresses visible on that wired network, then any 
bridging devices (eg Wireless APs) should transmit these packets into the 
air, and the wireless component of Airtight would pick these up and identify 
the presence of a wireless device connected to your LAN.  You're right in 
that you couldn't work the other way round - sorry for not being clearer!

Rgds,

Tim

----- Original Message ----- 
From: "Hari Sekhon" <hpsekhon () googlemail com>
To: <tim_holman () hotmail com>
Cc: <focus-ids () securityfocus com>
Sent: Wednesday, March 21, 2007 12:36 PM
Subject: Re: Wired detection of rogue access points


> that can't be very effective, if I attached a rogue access point, the 
> first thing I would do is to wpa protect it so nobody else can use it and 
> arouse suspicions...
>
> it would also block this test.
>
> Hari Sekhon
>
>
>
> tim_holman () hotmail com wrote:
> > www.Airtightnetworks.net  offer commercial products that can do what you 
> > need.
> > It sits on your network and works by sending small packets back to itself 
> > through any air based devices it can pick up (if these are connected to 
> > your network then the packets will loop back), thus both valid and 
> > invalid access points can be identified.
> > Rgds
> >
> > Tim
> >
> > Sent from my BlackBerry® wireless device
> > -----Original Message-----
> > From: johnnywkm () gmail com
> > Date: 19 Mar 2007 10:20:43 To:focus-ids () securityfocus com
> > Subject: Wired detection of rogue access points
> >
> > Hello there,
> >
> > Can anyone point me to a wired LAN scanner/sniffer that detects wireless 
> > access points connected to the LAN?
> >
> > Thanks,
> > JW
> >
> > ------------------------------------------------------------------------
> > Test Your IDS
> >
> > Is your IDS deployed correctly?
> > Find out quickly and easily by testing it with real-world attacks from 
> > CORE IMPACT.
> > Go to 
> > http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
> > to learn more.
> > ------------------------------------------------------------------------


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------