[TriLUG] detecting access points from the network

[Jeff Groves]

Ryan Leathers wrote:

>I use nmap -O against networks where I work and sift the results for
>wireless hits.
>Nessus finger printing could work as well, but I don't know how to script
>that.
>
>worst case, you could collect arp tables and compare against rfc 1700 for
>suspects 
>
>-----Original Message-----
>From: Dan Monjar [mailto:dan at daijin.dissimulo.com]
>Sent: Wednesday, September 22, 2004 2:58 PM
>To: trilug at trilug.org
>Subject: [TriLUG] detecting access points from the network
>
>
>Anyone have any ideas on detecting APs from the network side?... it would 
>be neat to have something that would tell tell me when someone plugs an 
>unauthorized AP into my network.  Better than wandering up and down the 
>hallways.
>
>  
>
Check out arpwatch.

Jeff G.