Detecting WAP's

From: sim (list@mcclincy.com)
Date: 01/02/02


From: "sim" <list@mcclincy.com>
To: <security-basics@securityfocus.com>
Date: Wed, 2 Jan 2002 14:57:43 -0800

Hello,
I spent the better part of my morning today tracking down a WAP within
my building. We basically stumbled onto the signal by blind luck
(testing a WAP enabled laptop) and I proceeded to walk around on a few
floors searching cubicles until I found it sitting inside someone's
cabinet.

My current network policy is no wireless devices.

My question is how does one proactively monitor for a WAP in a standard
routed/switched environment. Is there any intelligent way to accomplish
this? I would be interested in ideas/solutions for LAN's and WAN's. Is
there something I can look for within each packet or perhaps specific
types of traffic (broadcast?) create by the WAP?

Unfortunately I am not up on 802.11 (yet) and this recent incident has
me concerned given anyone within range had free access to my network.

Any comments, links, documents, or criticisms are welcome. Please
respond to the group.
CM



Relevant Pages

  • Re: Fw: Fw: Detecting WAPs
    ... Netstumbler would be a good choice. ... I wonder if there's a WAP around'. ... I belive that the perl script is the way to go. ... >>> My current network policy is no ...
    (Security-Basics)
  • Fw: Fw: Detecting WAPs
    ... require WAP sessions to use IPSec VPN ... >> My current network policy is no ...
    (Security-Basics)
  • Re: Detecting WAPs
    ... > I spent the better part of my morning today tracking down a WAP within ... actually the acronym for the Wireless Application Protocol which is used ... Abbreviating Access Point to AP is common usage so you were actually ... tracking down was an 802.11 Wireless AP within your building. ...
    (Security-Basics)
  • Re: Detecting WAPs
    ... > I spent the better part of my morning today tracking down a WAP within ... > My current network policy is no wireless devices. ... > me concerned given anyone within range had free access to my network. ...
    (Security-Basics)