wireless auditing

09-10-2001

I'm working at getting my BSD box set up. I have a Cisco 350 card (actually, 2 of them) and an access point. I expect to have an Orinoco card show up tomorrow. I envision my setup being my W2K box running NetStumbler (orinoco) and the BSD box doing promiscuous scanning.

My goal is to do security audits. To do audits, shouldn't I also be taking into account the FHSS networks (Spectrum24 hardware perhaps) and maybe even the Proxim stuff. I know 802.11 DSSS gear is the popular stuff right now but there are a lot of manufacturing companies using older Symbol (Spectrum24) gear too aren't there? Has anybody here put together anything for these networks?

10-17-2001

I've been asked to put together hardware, software, and procedures to do internal 802.11b audits for $MEGACORP.

One option I am considering is to use non WLAN specific RF monitoring equipment to detect any hardware on corporate property that is transmitting in the 2.4Ghz spectrum. Sure, I'll mostly end up hunting down the cafeteria microwave ovens, but this should also work to find cordless phones, wireless networking, and more.

Has anybody approached the problem from this direction?

10-17-2001

Instead of using 2 different boxes for auditing, has anyone tried using VMware on just one box?

I think the spectrum analyzer is a good idea that I had made as part of a wish-list post in a different area. Something that allows us to see all that the card sees would be cool.

But, your analyzer would let you see a lot more!

Tron Of Borg

10-18-2001

Vmware does not have "access" to PCMCIA. The network cards are emulated.

Currently I carry two laptops for audits and War Drives. They are two old 120MHZ units. One with Win2k (yes it works fine but uses much disk space) for Netstumbler the other runs RH Linux 7.1 with Ethereal / Airsnort.

10-18-2001

I have a compaq P120 that I have dual boot RH 7.0. If I can get the telnet running on it, would someone be willing to config it for airosnort and whatever?

I'm on cable so my end should be all that bad.

Just a thought.

Tron Of Borg

10-20-2001

AFAIK you need RH 7.1 (2.4.x) kernel to support everything required for Airsnort.

10-21-2001

Nonesuch,

By using "non WLAN specific RF monitoring equipment" I take it you mean devices that will also detect DSSS? I'm not sure if just simply detecting the 2.4 Ghz range would prove positive results alone.

r7
(Getting a burrito out of the microwave oven...)

09-10-2001	#1 (permalink)
Posts: n/a	wireless auditing I'm working at getting my BSD box set up. I have a Cisco 350 card (actually, 2 of them) and an access point. I expect to have an Orinoco card show up tomorrow. I envision my setup being my W2K box running NetStumbler (orinoco) and the BSD box doing promiscuous scanning. My goal is to do security audits. To do audits, shouldn't I also be taking into account the FHSS networks (Spectrum24 hardware perhaps) and maybe even the Proxim stuff. I know 802.11 DSSS gear is the popular stuff right now but there are a lot of manufacturing companies using older Symbol (Spectrum24) gear too aren't there? Has anybody here put together anything for these networks?

10-17-2001	#2 (permalink)
Posts: n/a	Professional Audits I've been asked to put together hardware, software, and procedures to do internal 802.11b audits for $MEGACORP. One option I am considering is to use non WLAN specific RF monitoring equipment to detect any hardware on corporate property that is transmitting in the 2.4Ghz spectrum. Sure, I'll mostly end up hunting down the cafeteria microwave ovens, but this should also work to find cordless phones, wireless networking, and more. Has anybody approached the problem from this direction?

10-17-2001	#3 (permalink)
Posts: n/a	VMware and Win/Xunix Instead of using 2 different boxes for auditing, has anyone tried using VMware on just one box? I think the spectrum analyzer is a good idea that I had made as part of a wish-list post in a different area. Something that allows us to see all that the card sees would be cool. But, your analyzer would let you see a lot more! Tron Of Borg

10-18-2001	#5 (permalink)
Posts: n/a	Would someone be willing to telnet? I have a compaq P120 that I have dual boot RH 7.0. If I can get the telnet running on it, would someone be willing to config it for airosnort and whatever? I'm on cable so my end should be all that bad. Just a thought. Tron Of Borg

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

10-18-2001	#4 (permalink)
Posts: n/a	Vmware does not have "access" to PCMCIA. The network cards are emulated. Currently I carry two laptops for audits and War Drives. They are two old 120MHZ units. One with Win2k (yes it works fine but uses much disk space) for Netstumbler the other runs RH Linux 7.1 with Ethereal / Airsnort.

10-20-2001	#6 (permalink)
Posts: n/a	AFAIK you need RH 7.1 (2.4.x) kernel to support everything required for Airsnort.

10-21-2001	#7 (permalink)
Posts: n/a	Nonesuch, By using "non WLAN specific RF monitoring equipment" I take it you mean devices that will also detect DSSS? I'm not sure if just simply detecting the 2.4 Ghz range would prove positive results alone. r7 (Getting a burrito out of the microwave oven...)