[27228] in resnet
Re: Anyone know of a tool that....
daemon@ATHENA.MIT.EDU (Carla Rounds)
Wed Feb 1 14:32:47 2012
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="------------030108020205030008070808"
Message-ID: <4F299352.8030304@ucsc.edu>
Date: Wed, 1 Feb 2012 11:32:34 -0800
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Carla Rounds <cjrounds@ucsc.edu>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <B3C0241889401F4AB97A55E980BABBA00133C33F9CFB@EXV01.wcu.edu>
This is a multi-part message in MIME format.
--------------030108020205030008070808
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
You Rock .. that's a great way to be a Theme Guide!!!!
On 2/1/2012 10:35 AM, Andy Voelker wrote:
>
> Speaking of tools (cool tools, that is)... The Student Technology
> Conference has an entire theme dedicated to "Cool Tools!" Hey, look
> at that! If anyone has mastered these tools and thinks the rest of us
> could benefit from them, be sure to submit a proposal to present your
> knowledge at the conference! I'd be happy to talk to you about it.
>
> Look forward to more shameless plugs and some pesky metaphors in the
> near future.
>
> -- Andy Voelker
>
> Manager of Student Computing in the Technology Commons
>
> Western Carolina University
>
> Be sure to check out the WCU TechTips Podcast at
> http://www.youtube.com/WesternCarolinaU!!
>
> Check the status of your IT requests at any time at http://help.wcu.edu/ !
>
> *From:*Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] *On Behalf Of
> *Chris Davis
> *Sent:* Thursday, January 26, 2012 5:51 PM
> *To:* RESNET-L@LISTSERV.ND.EDU
> *Subject:* Re: Anyone know of a tool that....
>
> Thanks for all the replies. I probably should have been a bit more
> accurate in the description of what I'm trying to do. I am remote to
> the site in question. So I have to use a tool that scans out over our
> wan link to the desired site and then probes the wireless subnet. So I
> can't use a wireless scanning solution. Pity that, because it
> probably has the best chance of doing what I wanted, but possibly not.
>
> Our wireless network is a large flat beast, spread across the whole
> campus consisting of a class B subnet and consisting of around 200 or
> 220 WAPs. Nothing I've tried seems to work. So far. I believe
> someone pointed me to a Mac based tool that I haven't tried yet.
> We'll have to see. I searched and found someone wrote up a way to get
> the data from nmap, but it doesn't seem to be working for me.
>
> One of my firewalls is constantly reporting half scan attacks from
> different IP addresses to the tune of between 10s and hundreds per
> day. Seems like when I get a number of these errors, I get the SYN
> attack warning, and then usually within 10 minutes, I get notification
> that there is no longer a SYN attack occurring. When I go in manually
> and look at these addresses, they have always been iPhones, iPods,
> iPod touches, etc. I'd really like a way to scan a list and compare
> it when the errors roll in. I'll update if anything changes.
>
> Thanks.
>
> Chris
>
> ___________________________________________________ You are subscribed
> to the ResNet-L mailing list.
>
> To subscribe, unsubscribe or search the archives, go to
> http://LISTSERV.ND.EDU/archives/resnet-l.html
> ___________________________________________________
>
>
> ___________________________________________________ You are subscribed
> to the ResNet-L mailing list.
>
> To subscribe, unsubscribe or search the archives, go to
> http://LISTSERV.ND.EDU/archives/resnet-l.html
> ___________________________________________________
>
--
Carla Rounds
University of California, Santa Cruz
Santa Cruz, California 95064
cjrounds@ucsc.edu
(831) 459-5757
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--------------030108020205030008070808
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
You Rock .. that's a great way to be a Theme Guide!!!!<br>
<br>
On 2/1/2012 10:35 AM, Andy Voelker wrote:
<blockquote
cite="mid:B3C0241889401F4AB97A55E980BABBA00133C33F9CFB@EXV01.wcu.edu"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Papyrus;
panose-1:3 7 5 2 6 5 2 3 2 5;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle18
{mso-style-type:personal;
font-family:Papyrus;
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal;
font-family:Papyrus;
color:#1F497D;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Speaking of
tools (cool tools, that is)… The Student Technology
Conference has an entire theme dedicated to “Cool Tools!”
Hey, look at that! If anyone has mastered these tools and
thinks the rest of us could benefit from them, be sure to
submit a proposal to present your knowledge at the
conference! I’d be happy to talk to you about it.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Look forward to
more shameless plugs and some pesky metaphors in the near
future.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="color:#1F497D">-- Andy
Voelker<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Manager of
Student Computing in the Technology Commons<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Western
Carolina University<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Be sure to
check out the WCU TechTips Podcast at <a
moz-do-not-send="true"
href="http://www.youtube.com/WesternCarolinaU">http://www.youtube.com/WesternCarolinaU</a>!!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Check the
status of your IT requests at any time at <a
moz-do-not-send="true" href="http://help.wcu.edu/">http://help.wcu.edu/</a>
!<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
Resnet Forum [<a class="moz-txt-link-freetext" href="mailto:RESNET-L@LISTSERV.ND.EDU">mailto:RESNET-L@LISTSERV.ND.EDU</a>] <b>On
Behalf Of </b>Chris Davis<br>
<b>Sent:</b> Thursday, January 26, 2012 5:51 PM<br>
<b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:RESNET-L@LISTSERV.ND.EDU">RESNET-L@LISTSERV.ND.EDU</a><br>
<b>Subject:</b> Re: Anyone know of a tool that....<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;color:#1F497D">Thanks for all the
replies. I probably should have been a bit more accurate in
the description of what I’m trying to do. I am remote to
the site in question. So I have to use a tool that scans
out over our wan link to the desired site and then probes
the wireless subnet. So I can’t use a wireless scanning
solution. Pity that, because it probably has the best
chance of doing what I wanted, but possibly not. <o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;color:#1F497D">Our wireless network
is a large flat beast, spread across the whole campus
consisting of a class B subnet and consisting of around 200
or 220 WAPs. Nothing I’ve tried seems to work. So far. I
believe someone pointed me to a Mac based tool that I
haven’t tried yet. We’ll have to see. I searched and found
someone wrote up a way to get the data from nmap, but it
doesn’t seem to be working for me. <o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;color:#1F497D">One of my firewalls
is constantly reporting half scan attacks from different IP
addresses to the tune of between 10s and hundreds per day.
Seems like when I get a number of these errors, I get the
SYN attack warning, and then usually within 10 minutes, I
get notification that there is no longer a SYN attack
occurring. When I go in manually and look at these
addresses, they have always been iPhones, iPods, iPod
touches, etc. I’d really like a way to scan a list and
compare it when the errors roll in. I’ll update if anything
changes. <o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;color:#1F497D">Thanks.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;color:#1F497D">Chris<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Times New
Roman","serif"">___________________________________________________
You are subscribed to the ResNet-L mailing list. <o:p></o:p></span></p>
<p>To subscribe, unsubscribe or search the archives, go to <a
moz-do-not-send="true"
href="http://LISTSERV.ND.EDU/archives/resnet-l.html">http://LISTSERV.ND.EDU/archives/resnet-l.html</a>
___________________________________________________ <o:p></o:p></p>
</div>
<br clear="all">
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to <a class="moz-txt-link-freetext" href="http://LISTSERV.ND.EDU/archives/resnet-l.html">http://LISTSERV.ND.EDU/archives/resnet-l.html</a>
___________________________________________________
</p>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Carla Rounds
University of California, Santa Cruz
Santa Cruz, California 95064
<a class="moz-txt-link-abbreviated" href="mailto:cjrounds@ucsc.edu">cjrounds@ucsc.edu</a>
(831) 459-5757</pre>
</body>
</html>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--------------030108020205030008070808--