Jochen Schulz wrote:
* Bob Alexander:Any tutorials on this ?I have been requested by our CIO to roam through our offices and try spotting rogue APs and possible external networks extending in our premises.I don't know any tutorial, but if you have specific questions we should be able to help. If you already have some wireless device running and if it supports monitor mode, you only need to tweak kismet's configuration a little bit and that's it. Again, if you tell us where in the process you're stuck, I am sure someone can help. J.
Thank you Jochen,I might not be finding the correct information source but have the following doubts:
1) What is the meaning of the "." and "!" symbols I see in the first column of the client ?
2) When the network shows no WEP and says it's open what is the meaning of an all 0.0.0.0 IP ?
3) For WEP networks it says "not decrypted". Will kismet try decrypting the WEP key ? Does it need to get special or many many packets ?
4) The signal level: is there a number that can mean the AP is quite near as opposed to in some other building ?? I currently see a couple of ranges: 5-10 and 25-40 ...
Thank you for any help, Bob