
14
V 2.2 Copyright SystemExperts 2001,2002,2003
27
Eavesdropping
n Indirect: listening to the network that the wireless
access point is connected to (PROMISC)
n Remember: WEP only encrypts data between the client and
the access point!
n Quite frankly, this is what most people are doing when they
talk about “sniffing wireless”
n Direct: listening to the airwaves (RFMON)
n Sender can not detect eavesdropping
n Frequency band largely determines range
n it is quite possible that it goes outside the building
n special electromagnetic shielding is needed to “stop” leakage
V 2.2 Copyright SystemExperts 2001,2002,2003
28
MAC Layer
n Can configure the AP to talk to specific Media
Access Control addresses
(MAC, a.k.a. hardware address)
n Not to be confused with Message Authentication Code (MAC)
n Controls access to wired network not wireless
n Some APs will use RADIUS to get the information
n Problem:
n MAC addresses can be manually set very easily
(see next slide)
Kommentare zu diesen Handbüchern