Discussion Locked

Dicovering rogue access points

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Does anybody know of a basic low-cost tool (probably software), that can be used over a WAN to identify all makes of networked access points on the end LAN.

5 replies

by crousec

The solution I am looking for would need to identify rogue access points on a LAN ACROSS A WAN LINK. I need a centralized solution for a problem which may exist on any of the dozens of LANS we have connected by a frame-relay WAN. Chuck

by john.jaster

Retrieve the logs from your DHCP server. This is a very rich source of MAC addresses seen on your network. Identify the OUI codes (first 24 bits) associated with the wired network cards used in the network using http://standards.ieee.org/regauth/oui/index.shtml
All others are suspicious and could be unauthorized wired devices, authorized wired devices with MAC address spoofing software (macof...), or unauthorized wireless devices with or without spoofing software (Wellenreiter...)

This discussion is closed to new replies.