Re: Rogue access point detection

["Mark W. Jeanmougin via Snort-sigs" <snort-sigs () lists snort org>]

I normally see that done by specialized devices with radios that scan for
Wi-Fi signals, compare that to your list of authorized devices, and alert
on the differences.

I've not seen that done by snort.

MJ


Sent from my toaster.

On Thu, Mar 21, 2019, 10:49 Alexander Lennartsson <al223sp () student lnu se>
wrote:

> Hi!
>
> I am working on a project where we are to compare different types of IDS /
> IPS and see how well they discover Rogue acccess points. Unfortunately, I
> cannot find any documentation about this.
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs () lists snort org
> https://lists.snort.org/mailman/listinfo/snort-sigs
>
> Please visit http://blog.snort.org for the latest news about Snort!
>
> Please follow these rules:
> https://snort.org/faq/what-is-the-mailing-list-etiquette
>
> Visit the Snort.org to subscribe to the official Snort ruleset, make sure
> to stay up to date to catch the most <a href="
> https://snort.org/downloads/#rule-downloads";>emerging threats</a>!
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists snort org
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a 
href=" https://snort.org/downloads/#rule-downloads";>emerging threats</a>!