Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Pen-Test
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Respuesta: Identification of non Cisco AP's

from [Omar Herrera] Network Security [Permanent Link]
Subject: Respuesta: Identification of non Cisco AP's
Date: Wed, 27 Jul 2005 13:10:07 -0500 
Hi Jonathan

Linksys AP I've seen all use an initial TTL of 150, calculating the number of 
hops between you an the hosts scanned and then add the TTL of responses should 
do it. Or simply looking at responses of probes to port 80 TCP, with a TTL 
close to and < 150 should be enough and relatively fast.

Regards,

Omar Herrera

----- Mensaje original -----
De: Jonathan Gauntt 

Hi,

I have been tasked with the project of scanning and identifying 
all non
Cisco wireless access points within the company?s network.

We have about 800 /22 and /24 subnets, and because of the IP 
addressingscheme in place, might just be easier for me to scan the 
whole class A range
of IP?s.

I have access to Nessus and GFI Security Scanner.  Since we over 
8000 IP?s
in place, does anyone have any advice on the best way to identify 
these non
Cisco AP?s such as Linksys and Netgear, etc.

I wouldn?t want to have a report produced that is two miles long 
unlessabsolutely necessary.

Thanks,


Jonathan
[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • Respuesta: Identification of non Cisco AP's, Omar Herrera <=
Previous by Date:  Etc/shadow file and john, Sherwyn Williams
Next by Date:  Re: Identification of non Cisco AP's, hfortier
Previous by Thread:  Etc/shadow file and john, Sherwyn Williams
Next by Thread:  Some trouble with yersinia, Daniele Bellucci
Indexes:  [Date] [Thread] [Top] [All Lists]