| ï
OK I think we may be getting somewhere. We have an
airBridge which looks dead in Simple NMS and will not ping and yet it is
associated with the airPoint when seen from Simple airPoint Monitor. I think I
will kill it's MAC address. This particular airBridge is in a shop where someone
could pick it up and look at the AC address! They seem to have solved the
problem of crashing our network every time they try and use it. Hello, they have
just become pingable again! Now Simple NMS has crashed.
----- Original Message -----
Sent: Friday, November 21, 2003 3:35
PM
Subject: Re: [smartBridges] MAC ATTACK on
airPoint PRO Outdoor?
Hmmm...do you have wep enabled? If so, and no one else
has it, then you're probably ok.
Do you have a DHCP server that will
show you which MAC addresses are logged on? If you see that there's a sb
product MAC address (00301A...etc.) but you cannot get into it with either
airBridge simpleMonitor or airPoint simpleMonitor, then that's the spoofed
MAC.
On Fri, 2003-11-21 at 10:24, Wayland Sothcott wrote:
ï
I was thinking that maybe someone had spoofed an
airBridge MAC address and had got in. Then perhaps they spoofed the airPoint
MAC address and everyone had lost association. I am not totally clear on
this.
Other points to ponder. I updated 4 airBridges with
1.08 beta the day before it happened.
I was running SimpleNMS both times.
Nothing worked properly until I power cycled the airPoint.
It's never
done this before.
----- Original Message -----
From: Sevak
Avakians
To: [EMAIL PROTECTED]
Sent: Friday, November 21, 2003 2:40 PM
Subject:
Re: [smartBridges] MAC ATTACK on airPoint PRO Outdoor?
I've also
noticed that simpleNMS sometimes knocks off a few customers, but they come
back on within a minute or two. I try not to use it most of the
time. airBridge simpleMonitor works well, though, so I use that
instead.
I can't think of how it can be an attack... What kind of
attack are you thinking it is, Wayland?
Sevak
On Fri,
2003-11-21 at 07:00, Wayland Sothcott wrote:
Nightmare for all WISPs
Whilst monitoring with Simple NMS all my clients dropped off. The bottom
screen went red, except for my own locally connected airBridge. My airBridge
kept associating and disassociating. The APPO has been working unattended
for months. Now two days in a row it has broken at 11am whilst I have been
monitoring with Simple NMS. The quick fix was to gain access to the building
and power cycle the device from the mains plug.
Could this be some sort of attack?
Regards,
Wayland.
The PART-15.ORG smartBridges Discussion List
To Join:
mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges <yournickname>
To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges)
Archives: http://archives.part-15.org
|
