[c-nsp] WIDS software

Frank Bulk frnkblk at iname.com
Mon Jun 26 09:22:30 EDT 2006


Vendors making products that use that Cisco scanner interface are
AirDefense, AirMagnet, and AirTight.  AirTight is the only vendor that is a
currently member of their Cisco Technology Developer Program.

Frank

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Sergey Velikanov
[Intelsoft]
Sent: Sunday, June 25, 2006 10:42 PM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] WIDS software

Hi

I'am reading documentation for Aironet 1300, it says :

"When an access point is configured as a scanner it can also capture frames
in monitor mode.
In monitor mode, the access point captures 802.11 frames and forwards them
to the WIDS engine
on your network. The access point adds a 28-byte capture header to every
802.11 frame that it
forwards, and the WIDS engine on your network uses the header information
for analysis.
The access point uses UDP packets to forward captured frames. Multiple
captured frames can
be combined into one UDP packet to conserve network bandwidth."

But I can't find any software that can analyse this encapsulated in UDP
packets. What software
can participate as WIDS for Aironet 1300 in monitor mode?
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/



More information about the cisco-nsp mailing list