Finding rogue access points in the office
 

Hello,

I have Kismet, Airsnort and a bunch of other tools running on RH9 on my laptop. Kismet reports a whole bunch of access points in my office...some secured, others not. Unfortunately there are other tenants in my building so it's possible that these are on their network.

Does anyone know of a good way to PHYSICALLY find the access points that Kismet is displaying? Netstumbler has a nice feature that shows signal strength depending on your position. This feature would help in physically locating rogue access points, however Netstumbler doesn't show the access points that Kismet is showing. Basically Netstumbler is useless because it is active rather than passive.

So I'd like to physically find the rogue access points using Kismet or some other Linux tool. Just wondering if anyone has any recommendations.

Thanks

I've seen this done using triangulation, but it usually works best with a directional antennae (like a yagi). Here are a couple of howto's that mght help:

http://www.giac.org/practical/GSEC/Anna_Zapata_GSEC.pdf
http://www.interlinknetworks.com/gra...d_tracking.pdf