Re: Wireless

["R. DuFresne" <dufresne () sysinfo com>]

On Fri, 9 Aug 2002, Jeff Newton wrote:

> ejb3 () cornell edu wrote:
>
> > Find rogue networks the same way their users do, with netstumbler or
> > something similar.  Anything that's got an SSID other than the official
> > one, or that's offering up addresses beyond the approved wireless range
> > gets hunted down.
>
> Netstumbler is great at finding "mis-configured" WAPs, or those with
> SSID broadcast enabled.  If the user has disabled the broadcast, nothing
> short of a wireless sniffer is going to see it.

Even with SSID broadcast disabled, those management packets will contain
the SSID's when folks are communicating with the AP or through it.  Not
much trouble to sniff this leakage out for sure.

Thanks,

Ron DuFresne
-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        admin & senior security consultant:  sysinfo.com
                        http://sysinfo.com

"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation."
                -- Johnny Hart

testing, only testing, and damn good at it too!

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards