Finding Rogue Access Points

[bkibbey]

Does anyone know how I might go about finding access points in my organization that non-IT dept. folks have stood up? as far as i can tell, the software that came with my cisco wireless card will only let me connect to those that i know the name of.

What am I missing?

[wdrootz]

The tool that we use to locate rogue access points was created internally using C programming and a perl script. Basically the program logs into the desktop gateway routers randomly and at peak usage times to examine the ARP table. We are looking for MAC addresses where first three bytes start with a 00-40-96 (unique to Aironet products).

If you are running a Cisco router you can do this manually:router> show ip arp | include 0040.96

Hope this helps

[8wsmith]

I'm not familiar with the Cisco wireless product line, but the products from Agere will show rouge access points on their site survey tools. Also you might try NetStumbler. You can find it at http://nycwireless.net/netstumbler/index.html.

[ED CARMODY]

Use a spectrum analyser

[jkemery]

I use Airopeek by Wildpackets. Works very well.

http://www.wildpackets.com