[Chugalug] Brute force attacks on router… Maybe?

[Dave Brockman]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 2/28/2013 3:17 PM, Stephen Kraus wrote:
> Time to start watching what is connecting, best thing to do is see
> if you can get the client list of what is connected via MAC
> addresses and look for repeat MAC addresses of devices you don't
> own.

He could check the DHCP pools on the pfsense box, but it doesn't
really sound like he's passing any traffic, Layer 1-3, I doubt he will
see many odd MAC addresses, most likely very few (from the wireless side).

Regards,

dtb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJRL8xxAAoJEMP+wtEOVbcdDmYH/1aWrQFeyKii/qgPMdjf125D
IrIWdMkKfob/OUX0ZSIumOBxSHp+qXWe1fQRsgV/Q43gShRobuggJI1KECQuAppH
d0J2/464Dt6eNPr93ppMgkFFEXXrUqzUzupMDzkp1w3ZOyE3wY4Wokh9KLUzSZtb
OVpYg36XmcXzFDaCvz6TrZEbdSSZODHYtXuYsKVBLb8CqDxbOc14bCVfAcBDVx4t
nfsxIVKti5TFkFEE2kYXWMeTHkECdaIiw4tpC8HyfgjisL5Ntru+RRWYikFo1cIT
AKFGEggDv/9WBiSEtfmWuHkymdz+p6GRLIGAOWewpFv/RctmKxLhQ1Yrn4ko9+g=
=ElO2
-----END PGP SIGNATURE-----