On Saturday, August 23, 2003, at 3:44 PM, Bernard Aboba wrote:
In my NetStumbler sessions I generally see a node called UKPIX.(but with
an umlaut over the U). What's odd is that for that SSID, there is an
always changing MAC Address, and they are consecutive.
Is this person running some kind of spoofing or cracking program?
If so, is there any way to get a cease and desist? If I can see him, he
can probably see me, and the rest of us in range. It seems appropriate to
respond ASAP if there is something naughty going on.
If UKPIX some totally innocent entity, I apologize if my suspicions offend, it just seems odd to me :)
Question: Is what you're seeing Beacons from Access Point(s) with
different (consecutive) BSSIDs and the same SSID? Are the Beacons on the
same channel? Are the Beacon's identical in content? If the channels are
different then you're probably seeing multiple access points. If the
channels are the same, but the Beacon content is different (e.g. different
rates or ciphersuites) then you're seeing a single physical AP advertising
multiple "virtual APs".
this is possible, but not absolute. There are programs that advertise 'pseudo-APs' that don't actually implement AP functions.
Jim
-- general wireless list, a bawug thing <http://www.bawug.org/> [un]subscribe: http://lists.bawug.org/mailman/listinfo/wireless
