[TriLUG] detecting access points from the network

[Ryan Leathers]

I use nmap -O against networks where I work and sift the results for
wireless hits.
Nessus finger printing could work as well, but I don't know how to script
that.

worst case, you could collect arp tables and compare against rfc 1700 for
suspects 

-----Original Message-----
From: Dan Monjar [mailto:dan at daijin.dissimulo.com]
Sent: Wednesday, September 22, 2004 2:58 PM
To: trilug at trilug.org
Subject: [TriLUG] detecting access points from the network


Anyone have any ideas on detecting APs from the network side?... it would 
be neat to have something that would tell tell me when someone plugs an 
unauthorized AP into my network.  Better than wandering up and down the 
hallways.

-- 
Dan Monjar
-- 
TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
TriLUG Organizational FAQ  : http://trilug.org/faq/
TriLUG Member Services FAQ : http://members.trilug.org/services_faq/
TriLUG PGP Keyring         : http://trilug.org/~chrish/trilug.asc