Re: Detecting WAP's

From: John Morris (bishop@nerdality.com)
Date: 01/03/02 

From: "John Morris" <bishop@nerdality.com>
To: "sim" <list@mcclincy.com>, <security-basics@securityfocus.com>
Date: Thu, 3 Jan 2002 14:28:32 -0800

Well, you could use any standard RF equipment that can show signal strength
in the 2.4ghz band... Alternatively, you could get a noise generator
(probably several) in the 2.4ghz band, and effectively trash all 802.11b
stuff, as well as cordless phones and some other devices.

Or... You could get a prism chipset based wireless card, and do the whole
war-walking gig.

We have "secure" conference rooms with such interference devices, to
prevent cell phones and any outside connectivity, however the FCC can be a
problem with regards to those, so if you are in U.S. might want to look at
relevant laws.

- Jo Ann

----- Original Message -----
From: "sim" <list@mcclincy.com>
To: <security-basics@securityfocus.com>
Sent: Wednesday, January 02, 2002 2:57 PM
Subject: Detecting WAP's

> Hello,
> I spent the better part of my morning today tracking down a WAP within
> my building. We basically stumbled onto the signal by blind luck
> (testing a WAP enabled laptop) and I proceeded to walk around on a few
> floors searching cubicles until I found it sitting inside someone's
> cabinet.
>
> My current network policy is no wireless devices.
>
> My question is how does one proactively monitor for a WAP in a standard
> routed/switched environment. Is there any intelligent way to accomplish
> this? I would be interested in ideas/solutions for LAN's and WAN's. Is
> there something I can look for within each packet or perhaps specific
> types of traffic (broadcast?) create by the WAP?
>
> Unfortunately I am not up on 802.11 (yet) and this recent incident has
> me concerned given anyone within range had free access to my network.
>
> Any comments, links, documents, or criticisms are welcome. Please
> respond to the group.
> CM

Relevant Pages

  • Re: Using Certificated Wireless - Authentication Failed?
    ... The WAP is on top of the server, under a desk, however the laptops are both ... have thought it would be weak signal strength (they're both getting 5/5 ... I have the laptop ... With the wireless computer in the same room as ...
    (microsoft.public.windows.server.sbs)
  • Re: Using Certificated Wireless - Authentication Failed?
    ... With the wireless computer in the same room as ... Long story short, the client ... I had to fiddle with the WAP ... the signal strength was Very Good to Excellent ... ...
    (microsoft.public.windows.server.sbs)