Trap a wifi wardriver

[DaveLembke]

Does anyone know of any tools to trap a wifi wardriver. We had a wireless network compomised in which our web filter saw that it was a user with a laptop and an external HD downloading porn through our corporate network.

I would like to find a way to be alerted when it happens again and go on a hunt to find the culprit. I have the MAC address and user name of the laptop and as long as the moron is too stupid to not change that MAC Address I can find him, and link him up to the proof of unlawful unauthorized access on our business network in which he cracked the 128-bit WEP.

I have been tempted to build up a wide open bogus network and put together some method of being alerted as a TRAP for a wifi wardriver when that MAC Address is detected on the network, then go around and find the moron and call the cops when a suspect is found.

In addition to this our network was probed very well from this individual, but our systems are secure not to allow access to any data THANK GOD!

Figured I'd post this to see if anyone else has seen any ways to trap a wifi connection, give them limited access to just the internet isolated from our corporate network, verify MAC address, and then notify authorities before?

Maybe I am a first at taking it this serious, but the idiot is stupid and has connected a few times to an idle disconnected from network Access Point as the log indicates. Now it looks like he may be riding in on a neighbors signal who is wide open, I havent notified, but we are getting probed for wifi when he is in the area on this stand alone Access Point.

Smart Wardrivers would never squat at the same place over and over again and would change system names and MAC addresses to stay anonymous. This person is going to get caught its just a matter of time, and I just need to find a way to be notified when the MAC address is detected as connected to a network.


Thanks!

Dave

[dahlarbear]

Suggest you redirect your energy toward beefing up the security of your network.  Perhaps use something stronger than WEP.

[WillyW]

When you turn a radio signal loose,  it is loose. 
There are a lot of wacky laws out there that defy common sense.    You are looking to try to enforce them, and that is just a mess.

Your best bet is to do the smart thing, and keep your signal off his antenna.

[Calum]

I agree with the above posts.
Redirect your efforts towards WPA2 encryption if possible, with MAC filtering and any other security features you have available.
I don't know if what you're proposing is possible, although I imagine with the right combination of rules (if your router has a built in firewall) you may be able to achieve some of what you want, i.e. limited access.
Also, for what it's worth you could report them to the authorities - just find the person and tell the cops where they are.