[27227] in resnet
Re: Anyone know of a tool that....
daemon@ATHENA.MIT.EDU (Andy Voelker)
Wed Feb 1 13:36:01 2012
Content-Language: en-US
Content-Type: multipart/alternative; boundary="_000_B3C0241889401F4AB97A55E980BABBA00133C33F9CFBEXV01wcuedu_"
MIME-Version: 1.0
Message-ID: <B3C0241889401F4AB97A55E980BABBA00133C33F9CFB@EXV01.wcu.edu>
Date: Wed, 1 Feb 2012 13:35:43 -0500
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Andy Voelker <avoelker@email.wcu.edu>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <AFF7E56B606814458FDD7379332233491C61FF39@SV-EXCMB-01.principia.local>
--_000_B3C0241889401F4AB97A55E980BABBA00133C33F9CFBEXV01wcuedu_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Speaking of tools (cool tools, that is)... The Student Technology Conferenc=
e has an entire theme dedicated to "Cool Tools!" Hey, look at that! If an=
yone has mastered these tools and thinks the rest of us could benefit from =
them, be sure to submit a proposal to present your knowledge at the confere=
nce! I'd be happy to talk to you about it.
Look forward to more shameless plugs and some pesky metaphors in the near f=
uture.
-- Andy Voelker
Manager of Student Computing in the Technology Commons
Western Carolina University
Be sure to check out the WCU TechTips Podcast at http://www.youtube.com/Wes=
ternCarolinaU!!
Check the status of your IT requests at any time at http://help.wcu.edu/ !
From: Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] On Behalf Of Chris Dav=
is
Sent: Thursday, January 26, 2012 5:51 PM
To: RESNET-L@LISTSERV.ND.EDU
Subject: Re: Anyone know of a tool that....
Thanks for all the replies. I probably should have been a bit more accurat=
e in the description of what I'm trying to do. I am remote to the site in =
question. So I have to use a tool that scans out over our wan link to the =
desired site and then probes the wireless subnet. So I can't use a wireless=
scanning solution. Pity that, because it probably has the best chance of =
doing what I wanted, but possibly not.
Our wireless network is a large flat beast, spread across the whole campus =
consisting of a class B subnet and consisting of around 200 or 220 WAPs. N=
othing I've tried seems to work. So far. I believe someone pointed me to =
a Mac based tool that I haven't tried yet. We'll have to see. I searched =
and found someone wrote up a way to get the data from nmap, but it doesn't =
seem to be working for me.
One of my firewalls is constantly reporting half scan attacks from differen=
t IP addresses to the tune of between 10s and hundreds per day. Seems like=
when I get a number of these errors, I get the SYN attack warning, and the=
n usually within 10 minutes, I get notification that there is no longer a S=
YN attack occurring. When I go in manually and look at these addresses, th=
ey have always been iPhones, iPods, iPod touches, etc. I'd really like a w=
ay to scan a list and compare it when the errors roll in. I'll update if a=
nything changes.
Thanks.
Chris
___________________________________________________ You are subscribed to t=
he ResNet-L mailing list.
To subscribe, unsubscribe or search the archives, go to http://LISTSERV.ND.=
EDU/archives/resnet-l.html ________________________________________________=
___
--
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--_000_B3C0241889401F4AB97A55E980BABBA00133C33F9CFBEXV01wcuedu_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:x=3D"urn:schemas-microsoft-com:office:excel" xmlns:m=3D"http://schema=
s.microsoft.com/office/2004/12/omml" xmlns=3D"http://www.w3.org/TR/REC-html=
40"><head><meta http-equiv=3DContent-Type content=3D"text/html; charset=3Du=
s-ascii"><meta name=3DGenerator content=3D"Microsoft Word 14 (filtered medi=
um)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Papyrus;
panose-1:3 7 5 2 6 5 2 3 2 5;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle18
{mso-style-type:personal;
font-family:Papyrus;
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal;
font-family:Papyrus;
color:#1F497D;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN-US link=3Dblue vli=
nk=3Dpurple><div class=3DWordSection1><p class=3DMsoNormal><span style=3D'c=
olor:#1F497D'>Speaking of tools (cool tools, that is)… The Student Te=
chnology Conference has an entire theme dedicated to “Cool Tools!R=
21; Hey, look at that! If anyone has mastered these tools and t=
hinks the rest of us could benefit from them, be sure to submit a proposal =
to present your knowledge at the conference! I’d be happy to ta=
lk to you about it.<o:p></o:p></span></p><p class=3DMsoNormal><span style=
=3D'color:#1F497D'><o:p> </o:p></span></p><p class=3DMsoNormal><span s=
tyle=3D'color:#1F497D'>Look forward to more shameless plugs and some pesky =
metaphors in the near future.<o:p></o:p></span></p><p class=3DMsoNormal><sp=
an style=3D'color:#1F497D'><o:p> </o:p></span></p><div><p class=3DMsoN=
ormal><span style=3D'color:#1F497D'>-- Andy Voelker<o:p></o:p></span></p><p=
class=3DMsoNormal><span style=3D'color:#1F497D'>Manager of Student Computi=
ng in the Technology Commons<o:p></o:p></span></p><p class=3DMsoNormal><spa=
n style=3D'color:#1F497D'>Western Carolina University<o:p></o:p></span></p>=
<p class=3DMsoNormal><span style=3D'color:#1F497D'>Be sure to check out the=
WCU TechTips Podcast at <a href=3D"http://www.youtube.com/WesternCarolinaU=
">http://www.youtube.com/WesternCarolinaU</a>!!<o:p></o:p></span></p><p cla=
ss=3DMsoNormal><span style=3D'color:#1F497D'>Check the status of your IT re=
quests at any time at <a href=3D"http://help.wcu.edu/">http://help.wcu.edu/=
</a> !<o:p></o:p></span></p></div><p class=3DMsoNormal><span style=3D'color=
:#1F497D'><o:p> </o:p></span></p><div><div style=3D'border:none;border=
-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=3DMsoNormal><b=
><span style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</=
span></b><span style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'=
> Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] <b>On Behalf Of </b>Chris =
Davis<br><b>Sent:</b> Thursday, January 26, 2012 5:51 PM<br><b>To:</b> RESN=
ET-L@LISTSERV.ND.EDU<br><b>Subject:</b> Re: Anyone know of a tool that....<=
o:p></o:p></span></p></div></div><p class=3DMsoNormal><o:p> </o:p></p>=
<p class=3DMsoNormal><span style=3D'font-size:12.0pt;color:#1F497D'>Thanks =
for all the replies. I probably should have been a bit more accurate =
in the description of what I’m trying to do. I am remote to the=
site in question. So I have to use a tool that scans out over our wa=
n link to the desired site and then probes the wireless subnet. So I can=
217;t use a wireless scanning solution. Pity that, because it probabl=
y has the best chance of doing what I wanted, but possibly not. <o:p>=
</o:p></span></p><p class=3DMsoNormal><span style=3D'font-size:12.0pt;color=
:#1F497D'><o:p> </o:p></span></p><p class=3DMsoNormal><span style=3D'f=
ont-size:12.0pt;color:#1F497D'>Our wireless network is a large flat beast, =
spread across the whole campus consisting of a class B subnet and consistin=
g of around 200 or 220 WAPs. Nothing I’ve tried seems to work.&=
nbsp; So far. I believe someone pointed me to a Mac based tool that I=
haven’t tried yet. We’ll have to see. I searched a=
nd found someone wrote up a way to get the data from nmap, but it doesnR=
17;t seem to be working for me. <o:p></o:p></span></p><p class=3DMsoN=
ormal><span style=3D'font-size:12.0pt;color:#1F497D'><o:p> </o:p></spa=
n></p><p class=3DMsoNormal><span style=3D'font-size:12.0pt;color:#1F497D'>O=
ne of my firewalls is constantly reporting half scan attacks from different=
IP addresses to the tune of between 10s and hundreds per day. Seems =
like when I get a number of these errors, I get the SYN attack warning, and=
then usually within 10 minutes, I get notification that there is no longer=
a SYN attack occurring. When I go in manually and look at these addr=
esses, they have always been iPhones, iPods, iPod touches, etc. IR=
17;d really like a way to scan a list and compare it when the errors roll i=
n. I’ll update if anything changes. <o:p></o:p></span></p=
><p class=3DMsoNormal><span style=3D'font-size:12.0pt;color:#1F497D'><o:p>&=
nbsp;</o:p></span></p><p class=3DMsoNormal><span style=3D'font-size:12.0pt;=
color:#1F497D'>Thanks.<o:p></o:p></span></p><p class=3DMsoNormal><span styl=
e=3D'font-size:12.0pt;color:#1F497D'>Chris<o:p></o:p></span></p><p class=3D=
MsoNormal><span style=3D'font-size:12.0pt;font-family:"Times New Roman","se=
rif"'>___________________________________________________ You are subscribe=
d to the ResNet-L mailing list. <o:p></o:p></span></p><p>To subscribe, unsu=
bscribe or search the archives, go to <a href=3D"http://LISTSERV.ND.EDU/arc=
hives/resnet-l.html">http://LISTSERV.ND.EDU/archives/resnet-l.html</a> ____=
_______________________________________________ <o:p></o:p></p></div><br cl=
ear=3Dall> =
</body></html>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--_000_B3C0241889401F4AB97A55E980BABBA00133C33F9CFBEXV01wcuedu_--
