There is no easy way.
You could ping all hosts in all networks with nmap -sP and through
combination of IP, resolved host name and MAC address find AP's.
If there is no hostname that is suspicious, and of course AP's manufacturers
have their own MAC address pool (so you can compare addresses with their
pool). Hard work and long shot, I agree...
The other solution would be to use Kismet or Airsnort and small WarDriving
around the building, but then again, what if there are 80 different AP's in
the area? Which one is your potential intruder? One with the strongest
signal? And what if signal is intentionally weakened?
My 2c,
Goran
-----Original Message-----
From: Warren, John [mailto:John.B.Warren@txgt.com]
Sent: Wednesday, April 19, 2006 9:09 PM
To: security-basics@securityfocus.com
Subject: Finding Wireless AP's on your network
What would be the best way to locate wireless devices on a remote
network? Some of these sites are hundreds of miles away from me, so it's
not feasible to detect them via normal methods (i.e., airsnort, kismet,
etc). Is there a way that I can easily tell if one is plugged into one
of the switches at the remote location?
-------------------------------------------------------------------------
This List Sponsored by: Webroot
Don't leave your confidential company and customer records un-protected.
Try Webroot's Spy Sweeper Enterprise(TM) for 30 days for FREE with no
obligation. See why so many companies trust Spy Sweeper Enterprise to
eradicate spyware from their networks.
FREE 30-Day Trial of Spy Sweeper Enterprise
http://www.webroot.com/forms/enterprise_lead.php
--------------------------------------------------------------------------
-------------------------------------------------------------------------
This List Sponsored by: Webroot
Don't leave your confidential company and customer records un-protected.
Try Webroot's Spy Sweeper Enterprise(TM) for 30 days for FREE with no
obligation. See why so many companies trust Spy Sweeper Enterprise to
eradicate spyware from their networks.
FREE 30-Day Trial of Spy Sweeper Enterprise
http://www.webroot.com/forms/enterprise_lead.php
--------------------------------------------------------------------------
