RE: Wireless LAN detection

From: Optrics Engineering - Shaun Sturby, MCSE (Shaun@Optrics.com)
Date: 12/07/02

  • Next message: Xaos: "IP conflict and mac"
    From: "Optrics Engineering - Shaun Sturby, MCSE" <Shaun@Optrics.com>
    To: "'Boschmann, Armin'" <aboschmann@hydro.mb.ca>
    Date: Fri, 6 Dec 2002 16:09:58 -0700
    
    

    Hello Armin,

    Take a look at 'Observer' by Network Instruments (www.networkinstruments.com) It is a realtime packet sniffer that will work with
    any NDIS5 supported NIC including 802.11a and 802.11b and it has the ability to send alerts from something as simple as a local
    popup to Dialing a pager or sending an e-mail via a dial-on-demand TCP/IP connection.

    -----Original Message-----
    From: Boschmann, Armin [mailto:aboschmann@hydro.mb.ca]
    Sent: Friday, December 06, 2002 11:45 AM
    To: 'security-basics@lists.securityfocus.com'
    Subject: Wireless LAN detection

    We have a policy of no-wireless at our sites. I want to audit this policy,
    similar to war-dialing, or more correctly war-driving.

    My thinking is to find illegal wireless equipment in realtime. My concern
    is insiders (temporary employees, contractors, 'bad' employees) plugging in
    a wireless access point, then accessing our network from the street, then
    disconnecting. So I am envisioning a computer with a wireless receiver that
    will look for TCP/IP traffic, and tell me if it detects communications to
    any of our computers.

    I can see several problems, such as distinguishing between our 192.168.x.x
    addresses and those on WLANs of our neighbors. Also I would have to harden
    the wireless detection computer, and ideally not connect it to our network
    at all yet have some means of notifying me (pager, cell modem).

    Does anyone know of a product that does this? Or if you think my approach
    is suspect, suggest another one?

    Armin Boschmann
    aboschmann@hydro.mb.ca
    Manitoba Hydro
    ___________________________________________________________________________________

    IMail Server has scanned this e-mail for viruses using Declude Virus from Optrics.com

    ___________________________________________________________________________________

    IMail Server has scanned this e-mail for viruses using Declude Virus from Optrics.com



    Relevant Pages

    • TidBITS#785/27-Jun-05
      ... Jeff Carlson continues his exploration of computerized poker ... and Adam examines both the Canary Wireless ... Rogue Amoeba's Audio Hijack Pro ... A Canary in the Network ...
      (comp.sys.mac.digest)
    • Re: Linksys NAS200 Network Storage adapter
      ... The only two wireless network settings that are of any consequence are the SSID and the encryption method and password. ... either click the "Print Network Settings" button on the final screen of the Wizard or simply access the appropriate XML file and get at them that way and then use the information to configure the router manually as I explained earlier. ... I've read thru some of the MS web site on that product and it appears to do everything a NAS will do plus other cool features, such as, with an xbox360 with the wireless adapter, I can stream my video/pics to my TV for family viewing. ...
      (microsoft.public.windowsxp.network_web)
    • [NMRC Advisory] Microsoft Windows Wireless Exposure on Laptops
      ... Application: Wireless Network Connection ... This advisory documents an anomaly involving Microsoft's Wireless Network ... If a laptop connects to an ad-hoc network it can later start ... This is known as a Link-Local address, and by default Link-Local is turned on on all Windows platforms on all interfaces, including wireless interfaces. ...
      (Bugtraq)
    • RE: palm VIIx wireless modem
      ... Here is a Wireless LAN Security FAQ, ... What are solutions to minimizing WLAN risk? ... that connects clients to the internal network. ...
      (Security-Basics)
    • only 1299.99
      ... With the arrival of the Sony Vaio VGN-UX280P Micro PC, ... Advanced Wireless Mobility ... integrates wireless Wide Area Network, ... and check e-mail without having to plug in your Sony Vaio notebook PC, ...
      (comp.periphs.printers)