nanog mailing list archives

Re: Detection of Rogue Access Points


From: Joe Hamelin <joe () nethead com>
Date: Sun, 14 Oct 2012 14:23:02 -0700

--
Joe Hamelin, W7COM, Tulalip, WA, 360-474-7474


On Sun, Oct 14, 2012 at 1:59 PM, Jonathan Rogers <quantumfoam () gmail com>wrote:

Gentlemen,


I'm looking for innovative ideas on how to find such a rogue device,


Check ARP tables for MAC address of wireless devices  (first few nybbles
show manufacturer.)  Or for ports with multiple devices where you know
there aren't switches.



ideally as soon as it is plugged in to the network.


That's going to take some decent scripting.  Left as an exercise...




--
Joe Hamelin, W7COM, Tulalip, WA, 360-474-7474


Current thread: