Detection of Rogue Access Points

[joe at nethead.com (Joe Hamelin)]

--
Joe Hamelin, W7COM, Tulalip, WA, 360-474-7474


On Sun, Oct 14, 2012 at 1:59 PM, Jonathan Rogers <quantumfoam at gmail.com>wrote:

> Gentlemen,
>
>
> I'm looking for innovative ideas on how to find such a rogue device,
>

Check ARP tables for MAC address of wireless devices  (first few nybbles
show manufacturer.)  Or for ports with multiple devices where you know
there aren't switches.



> ideally as soon as it is plugged in to the network.


That's going to take some decent scripting.  Left as an exercise...


>

--
Joe Hamelin, W7COM, Tulalip, WA, 360-474-7474