RE: Tools for Detecting Wireless APs - from the wire side.

From: Jon (vandivee@midsouth.rr.com)
Date: Sun Jun 09 2002 - 23:56:04 EDT


On a Cisco switch you can show the arp table and crossreference it with
the vendors MAC code... as discuss in a previous (long) thread

I am sure (not positive) that some router management software
(snmp-based) could give you a MAC dump from every device into a CSV,
then you could create a filter against corp auth NIC-MACs, leaving you
the rest to sort through

Just a thought,
Jon

-----Original Message-----
From: Isherwood Jeff C Contr AFRL/IFOSS
[mailto:Jeffrey.Isherwood@rl.af.mil]
Sent: Friday, June 07, 2002 1:22 PM
To: 'Pen-Test'
Subject: Tools for Detecting Wireless APs - from the wire side.

I'm doing some research for a paper on wireless security, and I've been
trying to find a decent way for an administrator to probe his network
for
APs that might be attached.

There seems to be very little out there for this sort of thing.

NMAP can recognize a fingerprint of some APs, but not all...

ISS can sweep a wire, and report back on any that have SNMP enabled...

APTOOLS claims to be capable, but isn't that easy to use or figure out
(for
me so far)

Is there anything else out there?

------------------------------------------------------------------------

----
This list is provided by the SecurityFocus Security Intelligence Alert
(SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please
see:
https://alerts.securityfocus.com/
----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:22 EDT