Comments on: Discover Rogue Access Points with DHCP http://www.edgeblog.net/2006/discover-rogue-access-points-with-dhcp/ Notes from the edge Wed, 19 Nov 2008 23:21:56 +0000 http://wordpress.org/?v=2.6.3 By: Chris Super http://www.edgeblog.net/2006/discover-rogue-access-points-with-dhcp/#comment-14328 Chris Super Tue, 05 Jun 2007 14:05:57 +0000 http://www.edgeblog.net/2006/discover-rogue-access-points-with-dhcp/#comment-14328 I know it isn't free but at least a couple of years ago was quite cheap and provided you with all of the info you needed about rouge APs and rouge clients. Also allowed you to DOS rouge APs in your area. http://www.networkchemistry.com/ I know it isn’t free but at least a couple of years ago was quite cheap and provided you with all of the info you needed about rouge APs and rouge clients. Also allowed you to DOS rouge APs in your area.

http://www.networkchemistry.com/

]]> By: David Dove http://www.edgeblog.net/2006/discover-rogue-access-points-with-dhcp/#comment-4164 David Dove Wed, 07 Mar 2007 22:42:52 +0000 http://www.edgeblog.net/2006/discover-rogue-access-points-with-dhcp/#comment-4164 In order to use the Netsh Dhcp commands under Windows XP you need to install a helper DLL.. It comes as part of AdminPak.msi. It is not sufficient to just copy Netsh.exe from a server. Complete instructions are at http://blogs.technet.com/teamdhcp/archive/2006/07/18/442308.aspx Relevant command is: netsh add helper dhcpmon.dll In order to use the Netsh Dhcp commands under Windows XP you need to install a helper DLL.. It comes as part of AdminPak.msi. It is not sufficient to just copy Netsh.exe from a server.

Complete instructions are at http://blogs.technet.com/teamdhcp/archive/2006/07/18/442308.aspx

Relevant command is: netsh add helper dhcpmon.dll

]]> By: Chris Waters http://www.edgeblog.net/2006/discover-rogue-access-points-with-dhcp/#comment-118 Chris Waters Sun, 10 Dec 2006 23:12:26 +0000 http://www.edgeblog.net/2006/discover-rogue-access-points-with-dhcp/#comment-118 Another great way to find rogue APs on a network is the free tool "RogueScanner". http://www.networkchemistry.com/products/roguescanner.php It scans a network and looks at lots of factors in addition to MAC addresses to accurately classify everything on the network, including rogues. Another great way to find rogue APs on a network is the free tool “RogueScanner”. http://www.networkchemistry.com/products/roguescanner.php It scans a network and looks at lots of factors in addition to MAC addresses to accurately classify everything on the network, including rogues.

]]> By: bill http://www.edgeblog.net/2006/discover-rogue-access-points-with-dhcp/#comment-16 bill Sun, 08 Oct 2006 22:38:24 +0000 http://www.edgeblog.net/2006/discover-rogue-access-points-with-dhcp/#comment-16 According to M$, the DHCP context of NETSH can only be run from a server. I checked and the Windows 2003 Admin Pak which you can load on XP does not include the DHCP context in NETSH. I tried copying the NETSH.EXE executable from Win2K3 server to XP and it would not execute. So, I think you are SOL. Sorry.The good news is your DHCP servers are either Win2K or Win2K3 so you can run these scripts on the local system. Or, you can use VMWare to run an admin instance of Win2K3 on your XP system... According to M$, the DHCP context of NETSH can only be run from a server. I checked and the Windows 2003 Admin Pak which you can load on XP does not include the DHCP context in NETSH. I tried copying the NETSH.EXE executable from Win2K3 server to XP and it would not execute. So, I think you are SOL. Sorry.The good news is your DHCP servers are either Win2K or Win2K3 so you can run these scripts on the local system. Or, you can use VMWare to run an admin instance of Win2K3 on your XP system…

]]> By: Alung http://www.edgeblog.net/2006/discover-rogue-access-points-with-dhcp/#comment-15 Alung Sun, 08 Oct 2006 22:01:02 +0000 http://www.edgeblog.net/2006/discover-rogue-access-points-with-dhcp/#comment-15 Do you know of any way to get similiar commands on xp? Do you know of any way to get similiar commands on xp?

]]> By: bill http://www.edgeblog.net/2006/discover-rogue-access-points-with-dhcp/#comment-14 bill Sun, 08 Oct 2006 04:15:32 +0000 http://www.edgeblog.net/2006/discover-rogue-access-points-with-dhcp/#comment-14 Sorry about that! I should have been more specific. I usually run all my admin scripts from Win2k3 so that I have the widest range of commands. I don't know why M$ changed the NETSH command for XP. Seems stupid. Thanks for helping me debug the script. -Bill Sorry about that! I should have been more specific. I usually run all my admin scripts from Win2k3 so that I have the widest range of commands. I don’t know why M$ changed the NETSH command for XP. Seems stupid. Thanks for helping me debug the script.

-Bill

]]> By: Alung http://www.edgeblog.net/2006/discover-rogue-access-points-with-dhcp/#comment-13 Alung Sun, 08 Oct 2006 04:10:47 +0000 http://www.edgeblog.net/2006/discover-rogue-access-points-with-dhcp/#comment-13 Yep, that's it. I'm using XP! Yep, that’s it. I’m using XP!

]]> By: bill http://www.edgeblog.net/2006/discover-rogue-access-points-with-dhcp/#comment-12 bill Sun, 08 Oct 2006 04:00:36 +0000 http://www.edgeblog.net/2006/discover-rogue-access-points-with-dhcp/#comment-12 I posted the files above for you. You do not need to create the files first. The first time the script uses >> it will create the files. Since you seemed to be having problems, I tried the scripts on a couple of different machines. It looks like the NETSH command on Windows XP does not have the DHCP option. On Windows 2003 server, NETSH DHCP works fine. That is likely the cause of your issues. -Bill I posted the files above for you. You do not need to create the files first. The first time the script uses >> it will create the files.

Since you seemed to be having problems, I tried the scripts on a couple of different machines. It looks like the NETSH command on Windows XP does not have the DHCP option. On Windows 2003 server, NETSH DHCP works fine. That is likely the cause of your issues.

-Bill

]]> By: Alung http://www.edgeblog.net/2006/discover-rogue-access-points-with-dhcp/#comment-11 Alung Sun, 08 Oct 2006 03:57:43 +0000 http://www.edgeblog.net/2006/discover-rogue-access-points-with-dhcp/#comment-11 One other thing, my netsh command doesn't have a dhcp option? Is mine outdated? One other thing, my netsh command doesn’t have a dhcp option? Is mine outdated?

]]> By: Alung http://www.edgeblog.net/2006/discover-rogue-access-points-with-dhcp/#comment-10 Alung Sun, 08 Oct 2006 03:42:51 +0000 http://www.edgeblog.net/2006/discover-rogue-access-points-with-dhcp/#comment-10 Don't you need to create the file with > prior to appending it with >>? When you append the clients.txt file it doesn't exist because you did a del as one of your first commands. Don’t you need to create the file with > prior to appending it with >>? When you append the clients.txt file it doesn’t exist because you did a del as one of your first commands.

]]>