Security Basics mailing list archives

RE: Alert when MAC address connects to network


From: "Filipe Joel de Almeida" <Filipe.Joel () netcabo pt>
Date: Tue, 21 Oct 2003 01:12:55 +0100

I use a software to monitor my network and detect if an unauthorized MAC
connects.

It's designed for wireless connections, but works the same in wired.

If you add all the MACS you have except the one that was stolen, it should
detect when it connects.

The link where I got the software from is:

http://home.comcast.net/~jay.deboer/airsnare/

I hope this helps you.

Filipe Joel de Almeida

-----Original Message-----
From: David J. Jackson [mailto:djackson () netdmz com] 
Sent: segunda-feira, 20 de Outubro de 2003 21:21
To: Magnus Rembold; security-basics () securityfocus com
Subject: RE: Alert when MAC address connects to network

I don't know if there is a utility to notify you....maybe snort, but keep in
mind the mac address can be spoofed and chances are it's gone for good.

        -----Original Message----- 
        From: Magnus Rembold [mailto:magnus () munterbund de] 
        Sent: Mon 10/20/2003 9:24 AM 
        To: security-basics () securityfocus com 
        Cc: 
        Subject: Alert when MAC address connects to network
        
        

        Hi all!
        
        We've got a problem in our school building. There are a lot of
laptops
        in various classrooms and now there is one that has been stolen.
We'd
        really like to be alerted when this machine connects again to the
        network and like to get our hands on the one using it now.
        
        Is there a possibility to get alarmed, when a certain MAC address
        connects to our network? Any other recommendations to our problem?
        
        Many thanks in advance,
        Magnus
        
        
        
---------------------------------------------------------------------------
        FREE Whitepaper: Better Management for Network Security
        
        Looking for a better way to manage your IP security?
        Learn how Solsoft can help you:
        - Ensure robust IP security through policy-based management
        - Make firewall, VPN, and NAT rules interoperable across
heterogeneous
        networks
        - Quickly respond to network events from a central console
        
        Download our FREE whitepaper at:
        http://www.securityfocus.com/sponsor/Solsoft_security-basics_031015
        
----------------------------------------------------------------------------
        
        



---------------------------------------------------------------------------
FREE Whitepaper: Better Management for Network Security

Looking for a better way to manage your IP security?
Learn how Solsoft can help you:
- Ensure robust IP security through policy-based management
- Make firewall, VPN, and NAT rules interoperable across heterogeneous
networks
- Quickly respond to network events from a central console

Download our FREE whitepaper at:
http://www.securityfocus.com/sponsor/Solsoft_security-basics_031015
----------------------------------------------------------------------------


Current thread: