[MLB-WIRELESS] Visited by Wardrivers?

[Tyson Clugg]

> >Nup definetly not a bad thing.  Get some mystery connections all the time
> >and I keep track of recurring MAC addresses just see what they're doing
if
> >they don't announce themselves on the website at http://10.10.128.1
>
> Do you have any super duper way of keeping track of the MAC addresses?  I
> just look through my dhcpd.leases file from time to time and keep a mental
> note of ones I've seen before.  I get a visitor on average once every two
> days.

'arpwatch' is your friend:
http://www.securityfocus.com/tools/142

Also, try remote arpwatch for doing much the same but via SNMP to a remote
device (eg: check MAC addresses connecting to your SNMP enabled AP):
http://freshmeat.net/projects/remarp/

Cheers,
Tyson.


To unsubscribe: send mail to majordomo at wireless.org.au
with "unsubscribe melbwireless" in the body of the message