08-19-2004, 01:21 AM
|
|
Pontificator
Join Date: Feb 2004
Posts: 1,398
|
|
HELP! Finding a rogue wifi AP on a corp LAN
(Mods: I decided to post in OT instead of Wireless because this doesn't relate to PPCs and more people visit this area.)
I work in a large school district's IT department, and we have about 30 schools/buildings that we support. One of the High Schools has an unauthorized Wireless Access Point in it called "TheSecretAccessPoint". We NEED to find it before school starts and remove it from our network. Sounds easy? Keep reading! :wink:
THE FACTS:
Pocket WiNc, a WAP sniffer, has found the network with a 40%-50% several times, but the signal only lasts for a few seconds and then it just disappears for a random amount of time!!
No WEP encryption, DHCP is enabled, SSID is broadcasting.
I have the MAC address but when we told our HP Procurve Switches to search for that MAC they couldn't find it.
It has internet access, but we can't stay connected long enough to run an IPCONFIG or check our leased IP.
The auditorium is very big and is in the middle of the building. Walking around the whole school yields no other signals. Rule out multipath or a directional wifi shoot, methinks.
It might be getting it's web access from a DSL or cable line.
This was set up by a high school geek (probably), so they won't have a EE degree or anything.
I'd really appreciate any help you can offer. I've spent a few hours already wandering all over the area looking for any CAT5 cables or hardware.
Thank you! Looking forward to creative ideas and links. :way to go:
|
| |
|
|
|
|
|
|
Threaded Mode