NetStumbler.org Forums

Go Back   NetStumbler.org Forums > Newbie Lounge
Reload this Page Stupid question on NetStumbler
Register Search Today's Posts Mark Forums Read

Reply
Page 1 of 2 1 2 >
 
LinkBack Thread Tools Display Modes
Old 07-01-2005   #1 (permalink)
dpelizzari
state? Confusion!
 
dpelizzari's Avatar
 
Join Date: Jul 2005
Posts: 3
Stupid question on NetStumbler
Our company is in the process of installing WAP's for legitimate use, however, along with this, we have been instructed to scan for "rogue" access points. The netstumbler software works fine, but my concern is, if my laptop has an 802.11b card in it, will it pickup only 802.11b WAP's? My concern is if a group of savvy users procure a rogue 802.11g or a WAP and connect it to the network, netstumbler (by restriction of my network card) would not show them as being active...
dpelizzari is offline   Reply With Quote
Old 07-01-2005   #2 (permalink)
streaker69
Psychic Amish Stumbler
 
streaker69's Avatar
 
Join Date: Jul 2004
Location: Virginville, BlueBall, Bird In Hand, Intercourse, Paradise, PA
Posts: 11,798
Quote:
Originally Posted by dpelizzari
Our company is in the process of installing WAP's for legitimate use, however, along with this, we have been instructed to scan for "rogue" access points. The netstumbler software works fine, but my concern is, if my laptop has an 802.11b card in it, will it pickup only 802.11b WAP's? My concern is if a group of savvy users procure a rogue 802.11g or a WAP and connect it to the network, netstumbler (by restriction of my network card) would not show them as being active...
Since I'm in a good mood, here's a cookie.

NS will detect B and G networks with a B card. And don't bother to ask me if I'm sure about that answer.

In addition depending upon the size if your company, you could implement the use of AirSnare to detect any rogue device plugged into your network.
__________________
"One of these days, I'm going to cut you to pieces."

If you're offended by this post, please feel free to report it to one of the many helpful moderators of this forum.

Thank you.
streaker69 is offline   Reply With Quote
Old 07-01-2005   #3 (permalink)
Thorn
Did you do the math?
 
Thorn's Avatar
 
Join Date: Apr 2002
Location: Villa Straylight
Posts: 10,084
NS will show 'G' routers with a 'B' card. A 'B' card will NOT show 'A' rogues. (Please read the FAQs, this is covered.)

NS will show blank SSIDs, but it It will NOT show rogues which have the SSID Broadcast Probe Response disabled. Do detect such rouges, you will need a passive scanner.
__________________
Thorn
"I'm The Doctor. I'm a Time Lord. I am from the planet Gallifrey in the constellation Kasterborous. I'm 903 years old and I am the man who is going to save your lives and all 6 billion people on the planet below... You got a problem with that?"
Thorn is offline   Reply With Quote
Old 07-01-2005   #4 (permalink)
streaker69
Psychic Amish Stumbler
 
streaker69's Avatar
 
Join Date: Jul 2004
Location: Virginville, BlueBall, Bird In Hand, Intercourse, Paradise, PA
Posts: 11,798
Quote:
Originally Posted by Thorn
NS will show 'G' routers with a 'B' card. A 'B' card will NOT show 'A' rogues. (Please read the FAQs, this is covered.)

NS will show blank SSIDs, but it It will NOT show rogues which have the SSID Broadcast Probe Response disabled. Do detect such rouges, you will need a passive scanner.
That's kinda why I suggested the use of AirSnare as well. I realize on a large enterprise network it might not be a good solution, but on a small to medium size network it could be a handy tool.
__________________
"One of these days, I'm going to cut you to pieces."

If you're offended by this post, please feel free to report it to one of the many helpful moderators of this forum.

Thank you.
streaker69 is offline   Reply With Quote
Old 07-01-2005   #5 (permalink)
theprez98
SpoonfeederExtraordinaire
 
theprez98's Avatar
 
Join Date: Jan 2005
Location: Maryland
Posts: 3,619
Quote:
Originally Posted by streaker69
Since I'm in a good mood, here's a cookie.
Can I get one too?
__________________
:00475160 0E A6 AE A0 19 E3 A3 46 .......F
:00475168 0D 65 17 0C 53 70 6F 6F .e..Spoo
:00475170 6E 66 65 65 64 65 72 2E nfeeder.
:00475178 45 78 74 72 61 6F 72 64 Extraord
:00475180 69 6E 61 69 72 65 5D 3B inaire];
:00475188 8B 9E 92 5A FF 5D A6 F0 ...Z.]..
theprez98 is offline   Reply With Quote
Old 07-01-2005   #6 (permalink)
streaker69
Psychic Amish Stumbler
 
streaker69's Avatar
 
Join Date: Jul 2004
Location: Virginville, BlueBall, Bird In Hand, Intercourse, Paradise, PA
Posts: 11,798
Quote:
Originally Posted by theprez98
Can I get one too?
Not until you finish your gruel.
__________________
"One of these days, I'm going to cut you to pieces."

If you're offended by this post, please feel free to report it to one of the many helpful moderators of this forum.

Thank you.
streaker69 is offline   Reply With Quote
Old 07-01-2005   #7 (permalink)
dpelizzari
state? Confusion!
 
dpelizzari's Avatar
 
Join Date: Jul 2005
Posts: 3
Revised stupid question
Ok, since my arm darned near fell off carrying my laptop around the building (and found no rogues), anyone know of a good hand-held/portable scanner for getting this done? Vendors, model numbers would be greatly appreciated.
dpelizzari is offline   Reply With Quote
Old 07-01-2005   #8 (permalink)
streaker69
Psychic Amish Stumbler
 
streaker69's Avatar
 
Join Date: Jul 2004
Location: Virginville, BlueBall, Bird In Hand, Intercourse, Paradise, PA
Posts: 11,798
Quote:
Originally Posted by dpelizzari
Ok, since my arm darned near fell off carrying my laptop around the building (and found no rogues), anyone know of a good hand-held/portable scanner for getting this done? Vendors, model numbers would be greatly appreciated.
Cookie time is over. Now's the time you search. Here's a suggestion. Ipaq and Ministumbler.
__________________
"One of these days, I'm going to cut you to pieces."

If you're offended by this post, please feel free to report it to one of the many helpful moderators of this forum.

Thank you.
streaker69 is offline   Reply With Quote
Old 07-01-2005   #9 (permalink)
wrzwaldo
I amuse you?
 
Join Date: Dec 2003
Posts: 9,127
Quote:
Originally Posted by dpelizzari
Our company is in the process of installing WAP's for legitimate use, however, along with this, we have been instructed to scan for "rogue" access points. The netstumbler software works fine, but my concern is, if my laptop has an 802.11b card in it, will it pickup only 802.11b WAP's? My concern is if a group of savvy users procure a rogue 802.11g or a WAP and connect it to the network, netstumbler (by restriction of my network card) would not show them as being active...
Remember to do the right thing.

http://www.stumbler.net/readme/readme_0_4_0.html

http://www.stumbler.net/readme/readme_Mini_0_4_0.html

Quote:
Commercial and Government users are strongly encouraged to donate. The suggested donation is US$50 per copy. You may donate by visiting the web site http://www.stumbler.net/donate. You can pay in a variety of ways and may send a Purchase Order if needed.
wrzwaldo is offline   Reply With Quote
Old 07-01-2005   #10 (permalink)
dpelizzari
state? Confusion!
 
dpelizzari's Avatar
 
Join Date: Jul 2005
Posts: 3
But, I want it all, including my cookie!
Streaker, I want it all, 802.11 a/b/g scanning, portable device, I can't seem to find a card for an iPaq that will do that... Oh, and what kind of cookie was that again?
dpelizzari is offline   Reply With Quote
Old 07-01-2005   #11 (permalink)
streaker69
Psychic Amish Stumbler
 
streaker69's Avatar
 
Join Date: Jul 2004
Location: Virginville, BlueBall, Bird In Hand, Intercourse, Paradise, PA
Posts: 11,798
Quote:
Originally Posted by dpelizzari
Streaker, I want it all, 802.11 a/b/g scanning, portable device, I can't seem to find a card for an iPaq that will do that... Oh, and what kind of cookie was that again?
You ain't gonna get a IPAQ that's gonna do all three.
__________________
"One of these days, I'm going to cut you to pieces."

If you're offended by this post, please feel free to report it to one of the many helpful moderators of this forum.

Thank you.
streaker69 is offline   Reply With Quote
Old 07-01-2005   #12 (permalink)
Thorn
Did you do the math?
 
Thorn's Avatar
 
Join Date: Apr 2002
Location: Villa Straylight
Posts: 10,084
Quote:
Originally Posted by streaker69
That's kinda why I suggested the use of AirSnare as well. I realize on a large enterprise network it might not be a good solution, but on a small to medium size network it could be a handy tool.
That's definately a good suggestion. We were posting at the same time, so I didn't see your post until mine was up.

Quote:
Originally Posted by dpelizzari
Ok, since my arm darned near fell off carrying my laptop around the building (and found no rogues), anyone know of a good hand-held/portable scanner for getting this done? Vendors, model numbers would be greatly appreciated.
Suggestion: Do a little WarDriving time outside of your building to learn what the programs will do. You might be missing things, and not know or understan what you are looking at without something to compare it against.
__________________
Thorn
"I'm The Doctor. I'm a Time Lord. I am from the planet Gallifrey in the constellation Kasterborous. I'm 903 years old and I am the man who is going to save your lives and all 6 billion people on the planet below... You got a problem with that?"
Thorn is offline   Reply With Quote
Old 07-01-2005   #13 (permalink)
brwrdrvr
Cajun from Hell
 
brwrdrvr's Avatar
 
Join Date: Feb 2005
Location: Capitol City, Louisiana
Posts: 3,265
Quote:
Originally Posted by streaker69
Since I'm in a good mood, here's a cookie.

NS will detect B and G networks with a B card. And don't bother to ask me if I'm sure about that answer.

In addition depending upon the size if your company, you could implement the use of AirSnare AirSnare AirSnare(Sorry I heard an echo ) to detect any rogue device plugged into your network.
/me agrees

AirSnare will make it possible for you to not have to carry your lappy around with you. Just run it on your laptop. Anything with a MAC address that connect to the network will be seen as soon as it injects packets into the network. This wonderful lil program will also work over hard-wired networks as well, so you can run it on a machine that is set off to the side and wired to the network.
__________________
We need to hire more IT people so we can get more CADD work done.
brwrdrvr is offline   Reply With Quote
Old 07-01-2005   #14 (permalink)
streaker69
Psychic Amish Stumbler
 
streaker69's Avatar
 
Join Date: Jul 2004
Location: Virginville, BlueBall, Bird In Hand, Intercourse, Paradise, PA
Posts: 11,798
Quote:
Originally Posted by brwrdrvr
/me agrees

AirSnare will make it possible for you to not have to carry your lappy around with you. Just run it on your laptop. Anything with a MAC address that connect to the network will be seen as soon as it injects packets into the network. This wonderful lil program will also work over hard-wired networks as well, so you can run it on a machine that is set off to the side and wired to the network.
Depending upon the size and configuratio of the network topology it would probably be best to put it on the same switch/hub as the main file servers, mail server or the gateway to the internet since all the machines would eventually have to hit one of those machines. That way you'd be sure to be seeing 99% of the traffic in Airsnare and have a higher probability of getting the rogues.

To get your list of friendly MAC's, run through the DHCP table and find which MAC's have leases. Then go through all your static devices and get their MAC's. Once that is done, and your friendly list is complete, do a PingSweep of the entire network and see what responds. AirSnare should pick up the rogues then.
__________________
"One of these days, I'm going to cut you to pieces."

If you're offended by this post, please feel free to report it to one of the many helpful moderators of this forum.

Thank you.
streaker69 is offline   Reply With Quote
Old 07-01-2005   #15 (permalink)
theprez98
SpoonfeederExtraordinaire
 
theprez98's Avatar
 
Join Date: Jan 2005
Location: Maryland
Posts: 3,619
Quote:
Originally Posted by streaker69
Depending upon the size and configuratio of the network topology it would probably be best to put it on the same switch/hub as the main file servers, mail server or the gateway to the internet since all the machines would eventually have to hit one of those machines. That way you'd be sure to be seeing 99% of the traffic in Airsnare and have a higher probability of getting the rogues.

To get your list of friendly MAC's, run through the DHCP table and find which MAC's have leases. Then go through all your static devices and get their MAC's. Once that is done, and your friendly list is complete, do a PingSweep of the entire network and see what responds. AirSnare should pick up the rogues then.
Also, friendly MACs have to be added by hand into the TrustedMAC.txt file, AFAIK AS won't do it for you. Then again, I could be wrong.
__________________
:00475160 0E A6 AE A0 19 E3 A3 46 .......F
:00475168 0D 65 17 0C 53 70 6F 6F .e..Spoo
:00475170 6E 66 65 65 64 65 72 2E nfeeder.
:00475178 45 78 74 72 61 6F 72 64 Extraord
:00475180 69 6E 61 69 72 65 5D 3B inaire];
:00475188 8B 9E 92 5A FF 5D A6 F0 ...Z.]..
theprez98 is offline   Reply With Quote
Reply
Page 1 of 2 1 2 >

« WinXP Signal Strength Reports | Thanks for your help. »

Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



Google
 
Web NetStumbler.org

All times are GMT -7. The time now is 08:55 AM.

Contact Us - NetStumbler.org - NetStumbler.com - Online Backup - Archive - Top

Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0 ©2007, Crawlability, Inc.


All messages express the views of the author and are for entertainment purposes only. Netstumbler.org cannot be held responsible for the authenticity of the content or the actions of its members. By using this site and its services, you warrant that you will not post any messages that are discriminating, obscene, hateful, threatening, or otherwise violates any laws and you release Netstumbler.org from any future claims of any kind whatsoever including, but not limited to, addiction and loss of productivity. All forum messages, private messages and any other content are properties of Netstumbler.org. Even if publicly available, personal or copyrighted information are not to be posted without the consent of the owner. Distribution of licensed and copyrighted materials in any way not endorsed by the copyright owner is strictly prohibited. You may not use this site and its resources to spam other sites or individuals or perform any action that violates any law. Items sold or bought in the For Sale forum are sold as is and no warranty or insurance of any kind is provided. Netstumbler.org cannot be held responsible for the outcome of any transactions and no warranty of any kind is provided, either express or implied. Vulgar words are not allowed in the subject lines ; they may be used in the message body in any forum. The Administrator, Super Moderators and Moderators of Netstumbler.org have the right to remove, edit, move or close any thread for any reason and to reveal your identity and other known information in the event of a complaint or legal action arising from any message posted by you.