2KKUU7ita

174
Part III: Hacking Network Hosts
Figure 9-13:
You can
configure
OmniPeek to
detect APs
that don’t
broadcast
their SSIDs.
Figure 9-14:
Using
CommView
for WiFi
to spot
wireless
systems
that don’t
belong.
The safest way to root out hidden APs is to simply search for 802.11 management
packets. You can configure OmniPeek to search for 802.11 management
packets to root out hidden APs by enabling a capture filter on 802.11 management
packets, as shown in OmniPeek’s options in Figure 9-13.
Figure 9-14 shows how you can use CommView for WiFi to spot an odd network
host; for instance, the Hon Hai and Netgear systems if you know you
only use Cisco and Netopia hardware on your network.
My test network for this example is small compared to what you might see,
but you get the idea of how an odd system can stand out.