Assistance with troubleshooting an audit

12-05-2005

I am doing an audit. I just got a Palm TX and am using a Wifi Finder type program. I have used this successfully in two of my locations, but have a wierd occurance in another. I could use some advice so here goes . . . .

I was auditing one of my plants today. A plant that has NO wireless, or at least should not have any, I was scanning with the program and picked up several SSIDs that were called "linksys". I thought at first that someone had a linksys AP in the building. The longer I let the scan go, the more of these occurrences occurred. Then I looked at the info and have some questions. Each entry said that it was on channel 11 and was in BSS mode.

I am sort of new to this war driving side of things and want to clear things up. I have used this in a couple of other plants and found valid APs. I guess what I am trying to get at, is how do I determine that there is a problem here ? There is supposed to be no wireless in this particular plant. I find it hard to believe that there could be 10 APs named "linksys" in this one plant. Could this device be picking up laptops that have linksys cards ?

wrzwaldo · 12-05-2005

Quote:

Originally Posted by tenge911

I am doing an audit. I just got a Palm TX and am using a Wifi Finder type program. I have used this successfully in two of my locations, but have a wierd occurance in another. I could use some advice so here goes . . . .

I was auditing one of my plants today. A plant that has NO wireless, or at least should not have any, I was scanning with the program and picked up several SSIDs that were called "linksys". I thought at first that someone had a linksys AP in the building. The longer I let the scan go, the more of these occurrences occurred. Then I looked at the info and have some questions. Each entry said that it was on channel 11 and was in BSS mode.

I am sort of new to this war driving side of things and want to clear things up. I have used this in a couple of other plants and found valid APs. I guess what I am trying to get at, is how do I determine that there is a problem here ? There is supposed to be no wireless in this particular plant. I find it hard to believe that there could be 10 APs named "linksys" in this one plant. Could this device be picking up laptops that have linksys cards ?

Look at the forum description!!!

Quote:

Stumbling Setups
Post info/pics about your rigs that you use for stumbling!

As for your device... Sure (of course keep in mind that we do not know what software you are using). If you need to do a real audit then get the real gear to do it!

Thorn · 12-05-2005

I've moved this to the Pocket PC Forum, as the possibe best fit, even though a Palm is not a PPC. The "Stumbling Setups" Forum is to describe the gear that individuals use for their NS rigs.

As to what you are seeing: It could be any number of things.:
1) Rogue APs on the plant site.
2) Wireless cards (as you described)
3) "Ghosts" caused by a single laptop card in Ad Hoc mode. Ad-Hoc weirdness - multiplying clients
4) Nearby (legitimate) APs not on the plant site.

Understand that most of us here don't have Palms (I gave my last one away 2 years ago), so we won't be familiar with the software you're using.

dakkon2k · 12-05-2005

Does this Palm software have the ability to log/display MAC addresses?
If so compare them to your servers logs. You do have logging enabled riight

12-05-2005	#1 (permalink)
tenge911 Posts: n/a	Assistance with troubleshooting an audit I am doing an audit. I just got a Palm TX and am using a Wifi Finder type program. I have used this successfully in two of my locations, but have a wierd occurance in another. I could use some advice so here goes . . . . I was auditing one of my plants today. A plant that has NO wireless, or at least should not have any, I was scanning with the program and picked up several SSIDs that were called "linksys". I thought at first that someone had a linksys AP in the building. The longer I let the scan go, the more of these occurrences occurred. Then I looked at the info and have some questions. Each entry said that it was on channel 11 and was in BSS mode. I am sort of new to this war driving side of things and want to clear things up. I have used this in a couple of other plants and found valid APs. I guess what I am trying to get at, is how do I determine that there is a problem here ? There is supposed to be no wireless in this particular plant. I find it hard to believe that there could be 10 APs named "linksys" in this one plant. Could this device be picking up laptops that have linksys cards ?

12-05-2005	#3 (permalink)
Thorn Did you do the math? Join Date: Apr 2002 Location: Villa Straylight Posts: 10,039	I've moved this to the Pocket PC Forum, as the possibe best fit, even though a Palm is not a PPC. The "Stumbling Setups" Forum is to describe the gear that individuals use for their NS rigs. As to what you are seeing: It could be any number of things.: 1) Rogue APs on the plant site. 2) Wireless cards (as you described) 3) "Ghosts" caused by a single laptop card in Ad Hoc mode. Ad-Hoc weirdness - multiplying clients 4) Nearby (legitimate) APs not on the plant site. Understand that most of us here don't have Palms (I gave my last one away 2 years ago), so we won't be familiar with the software you're using. __________________ Thorn "Lawyers should never marry lawyers. This is called inbreeding. It produces idiot children and more lawyers." Last edited by Thorn : 12-05-2005 at 01:26 PM.

12-05-2005	#4 (permalink)
dakkon2k proselyte Join Date: Jul 2005 Location: Quite a bit EAST & a smidgen south of the world famous Rat. 2 miles from the beach or 1/2 a mile from a golf course and liquor store, or 2 miles from a Gun store or 5 miles from a hooters or a "adult nightclub" Posts: 894	Does this Palm software have the ability to log/display MAC addresses? If so compare them to your servers logs. You do have logging enabled riight __________________ Unable to apply patch, Please install M$ Outlook to continue. A journey of a thousand posts begins with How To Ask Questions The Smart Way

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode