week 4 assignment and lab

Hardware/Software Setup Required

NetStumbler (available at http://www.netstumbler.com/ )

Nmap (available at http://insecure.org/ )

Problem Description

In this lab, you will learn how to detect an access point using a wireless card and NetSumbler. In addition, you will learn how to detect an access point using a wired connection and Nmap.

Estimated completion time: 60 minutes.

Outcome

Report the steps for performing the task above.

Validation/Evaluation

· Detect a wireless access point with NetStumbler

Detect a wireless access point with Nmap

· Lab Solution

1. Download NetStumbler from http://www.netstumbler.com/ and install it on your computer.

2. Start NetStumbler. NetStumbler will automatically scan for all available networks and list the results.

3. NetStumbler lists the following information for each network:

a. MAC

b. SSID

c. Name

d. Channel

e. Speed

f. Vendor (Manufacturer)

g. Type

h. Encryption

i. Signal-to-noise ratio (SNR)

j. Signal level

k. Noise level

l. IP Address

m. Subnet

n. Latitude

o. Longitude

p. First seen

q. Last seen

r. Flags

s. Beacon interval

t. Distance

4. You can filter the list of available networks based on a specific characteristic. For example, expand the Filters tree on the left panel and select the ESS (AP) option to display only access point devices.

5. Now, download the Nmap for Windows ZIP file from http://insecure.org/ and extract it on C:\nmap.

6. Open a new command prompt window and go to C:\nmap.

7. Type nmap -sP -v your_network_address and press Enter to scan for all live hosts on your subnet. Nmap will display the vendor name and the MAC address of each live host.

8. By inspecting the list, you might be able to spot live hosts that look like APs. For example, in our case, the host 192.168.1.1 is a Cisco-Linksys device. Cisco and Linksys are common manufacturers of APs.

9. Type nmap -sS -A target_IP_address and press Enter to display more information about a particular host. You can also specify a range of IP addresses instead of a single one.

10. From the information displayed by Nmap, you can conclude that the scanned host is indeed a Linksys WRTSL54G wireless AP and router.

11. Note that Nmap can only list access points that are attached to the same network as the computer running Nmap. NetStumbler, on the other hand, can list all APs that are wirelessly in range of the scanning computer.

12. Close all windows.