RE: Tools for Detecting Wireless APs - from the wire side.

From: Jon (vandivee@midsouth.rr.com)
Date: 06/10/02


From: "Jon" <vandivee@midsouth.rr.com>
To: "'Pen-Test'" <pen-test@securityfocus.com>
Date: Sun, 9 Jun 2002 22:56:04 -0500

On a Cisco switch you can show the arp table and crossreference it with
the vendors MAC code... as discuss in a previous (long) thread

I am sure (not positive) that some router management software
(snmp-based) could give you a MAC dump from every device into a CSV,
then you could create a filter against corp auth NIC-MACs, leaving you
the rest to sort through

Just a thought,
Jon

-----Original Message-----
From: Isherwood Jeff C Contr AFRL/IFOSS
[mailto:Jeffrey.Isherwood@rl.af.mil]
Sent: Friday, June 07, 2002 1:22 PM
To: 'Pen-Test'
Subject: Tools for Detecting Wireless APs - from the wire side.

I'm doing some research for a paper on wireless security, and I've been
trying to find a decent way for an administrator to probe his network
for
APs that might be attached.

There seems to be very little out there for this sort of thing.

NMAP can recognize a fingerprint of some APs, but not all...

ISS can sweep a wire, and report back on any that have SNMP enabled...

APTOOLS claims to be capable, but isn't that easy to use or figure out
(for
me so far)

Is there anything else out there?

------------------------------------------------------------------------

----
This list is provided by the SecurityFocus Security Intelligence Alert
(SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please
see:
https://alerts.securityfocus.com/

---------------------------------------------------------------------------- This list is provided by the SecurityFocus Security Intelligence Alert (SIA) Service. For more information on SecurityFocus' SIA service which automatically alerts you to the latest security vulnerabilities please see: https://alerts.securityfocus.com/



Relevant Pages

  • RE: SQL
    ... Subject: SQL ... >> This list is provided by the SecurityFocus Security ... For more information on SecurityFocus' SIA service which ... >This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • RE: Insurance
    ... property--data beign deemed "intangible" for the purposes of insurance. ... for physical security testing there are often 3rd parties ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • RE: Pen-Testing Lotus Notes/Domino
    ... Subject: Pen-Testing Lotus Notes/Domino ... of document security. ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • R: Pen-Testing help (Compaq Insight & htsearch)
    ... This web server happens to be in front of their ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: Application & Iplanet/Apache web server vulnerability and penetration testing
    ... I don't know what to do on the web servers other than delete example ... Any suggestions on iPlanet and Apache security? ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)