Comments on: Discover Rogue Access Points with DHCP

By: bill

bill — Thu, 24 Sep 2009 00:20:01 +0000

Mike,

Sleep is part of WIndows 2003 Resource Kit Tools. You can get them here:

http://www.microsoft.com/downloads/details.aspx?FamilyID=9D467A69-57FF-4AE7-96EE-B18C4790CFFD&displaylang=en

By: Mike

Mike — Wed, 23 Sep 2009 21:52:47 +0000

The sleep command errors out on my XP box: ’sleep’ is not recognized as an internal or external command, operable program or batch file.

An alternate “1 second” batch file method is to ping self:

ping 127.0.0.1 -n 1>nul

increase the number of pings to increase the “sleep”. it’s probably a little more universally workable on different MS OS platforms.

By: joe

joe — Tue, 01 Sep 2009 21:13:52 +0000

Thanks, Bill.

Nice work!

By: bill

bill — Fri, 21 Aug 2009 23:41:36 +0000

Joe,

No magic trick here. You have to keep the list current yourself. I created the list by researching IEEE website. The major manufacturers don’t change their MAC prefixes very often.

By: joe

joe — Fri, 21 Aug 2009 22:06:27 +0000

Bill,

How do you ensure”….known AP MAC address prefixes” is current?

By: Jimmy

Jimmy — Mon, 26 Jan 2009 18:56:54 +0000

Bill,
Nice work it works great.. Thanks

By: bill

bill — Fri, 05 Dec 2008 17:39:10 +0000

Rich,

I think it is reading through the :CheckMacs section twice, because it is reading it as a subset of the :ScopeDump section. It is not supposed to do that. Try moving :CheckMacs to a seperate batch file and run it after the 1st. One approach I’ve used in the past when I’ve seen issues like this is to have multiple seperate batch files, and then a controlling master batch file that calls each of the sub batches in order. It is a little ugly but it works.

-Bill

By: RIch

RIch — Fri, 05 Dec 2008 17:17:24 +0000

Bill,

When I run this it searches each dhcp server in succession, that is dhcp server 1, then writes the accesspoint file, then dhcp server 1 and dhcp server 2, then appends to the accesspoint file, then it searches dhcp server 1 then 2 then 3, then writes to the accesspoint file. Shouldnt it search 1 dhcp server then write to the accesspoint file then search the next one, rather than start at the top each time? Teh final accesspoint file has the first servers information in it as many times as dhcp servers and I have 20. feel free to email me back if you can.

By: Chris Super

Chris Super — Tue, 05 Jun 2007 14:05:57 +0000

I know it isn’t free but at least a couple of years ago was quite cheap and provided you with all of the info you needed about rouge APs and rouge clients. Also allowed you to DOS rouge APs in your area.

http://www.networkchemistry.com/

By: David Dove

David Dove — Wed, 07 Mar 2007 22:42:52 +0000

In order to use the Netsh Dhcp commands under Windows XP you need to install a helper DLL.. It comes as part of AdminPak.msi. It is not sufficient to just copy Netsh.exe from a server.

Complete instructions are at http://blogs.technet.com/teamdhcp/archive/2006/07/18/442308.aspx

Relevant command is: netsh add helper dhcpmon.dll