Broken Wireless Network

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Broken Wireless Network

davide

214 posts

Master Geek

Trusted

#23730 8-Jul-2008 10:54

Hi There
Just a quick question, related to an experience I had recently.

Was staying at a place with a free WIFI network, but a friend we were staying with broke the WIFI by doing a port scan on the network. We think that the server shat itself, the network was still connecting, but the server wasn't giving out the IP address. Would this have been to do with the DHCP server? If so, how would we rectify the situation?

Cheers

------------------------------------------------------
David Elsbury
Freelance Lighting, Sound and AV Technician
"Technician like ninja... live in shadow, move in silence"

cisconz

cisconz
1348 posts

Uber Geek
+1 received by user: 179

ID Verified

Trusted

Lifetime subscriber

#144425 8-Jul-2008 10:56

That sounds like hax0r broken DHCP to me

Hmmmm

davide

214 posts

Master Geek

Trusted

#144436 8-Jul-2008 11:04

I have made a diagram to show the network if that helps

------------------------------------------------------
David Elsbury
Freelance Lighting, Sound and AV Technician
"Technician like ninja... live in shadow, move in silence"

Fossie

1240 posts

Uber Geek

Trusted

#144469 8-Jul-2008 11:21

How many scans was the 1337 h4x0r running at once?

sbiddle

30853 posts

Uber Geek
+1 received by user: 9996

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#144486 8-Jul-2008 11:35

I believe the diagram is missing a physical IP phone that was connected to the wired network.

davide

214 posts

Master Geek

Trusted

#144494 8-Jul-2008 11:39

Sorry sbiddle. Cisconz will post a new picture. I belive that it was just the one port scan at the time.

------------------------------------------------------
David Elsbury
Freelance Lighting, Sound and AV Technician
"Technician like ninja... live in shadow, move in silence"

cisconz

cisconz
1348 posts

Uber Geek
+1 received by user: 179

ID Verified

Trusted

Lifetime subscriber

#144495 8-Jul-2008 11:40

sbiddle: I believe the diagram is missing a physical IP phone that was connected to the wired network.

Just for you sbiddle

Hmmmmm

Hmmmm

Geekzone

Want to support Geekzone and browse the site without the ads? Subscribe to Geekzone now (monthly, annual and lifetime options).

mushion22

297 posts

Ultimate Geek

Trusted

#144503 8-Jul-2008 11:45

- Where was it at, does the network cover a big building with multiple APs, or just a single AP?
- It is a commercial 3rd party network or is it self-run by wherever you were staying?
- Do you know what make/model any of the equipment is?
- What have you tried so far to fix0r the booboos?

Could be some kind of DoS defense. If it's enterprise/carrier-grade gear it could have a config to take down ports if DoS-like activitiy is detected.

If it was some messed up port scanner that uses telnet or something maybe it said some naughty words to the gear.

Some lessons in here somewhere?

davide

214 posts

Master Geek

Trusted

#144516 8-Jul-2008 11:56

The site in question was a hotel. Large building with multiple AP's. A network installed by a company called Vistagate .
We know that the server that went down was a HP server.

It's possible that there was some DoS sensing involved, it's odd though that it took down the whole WIFI for the hotel.
After we contacted the ISP who supplied the connection to the hotel, and they requested the server be rebooted, the internet still did not come up.

As far as lessons go, I don't think that the person concerned will be trying anything like this for a while ;)

------------------------------------------------------
David Elsbury
Freelance Lighting, Sound and AV Technician
"Technician like ninja... live in shadow, move in silence"

mushion22

297 posts

Ultimate Geek

Trusted

#144545 8-Jul-2008 12:22

Heh.

Is there internet connectivity at any point? Does the Vistagate box have net connectivity? If so then i'd check the firewall on it's LAN facing interface, and also reboot the LAN switches.

davide

214 posts

Master Geek

Trusted

#144552 8-Jul-2008 12:38

Amother l33t hax0r did manage to find the switch, 192.168.1.1, admin/admin (silly, having the switch with default user/pass...) which was rebooted but this did not help

------------------------------------------------------
David Elsbury
Freelance Lighting, Sound and AV Technician
"Technician like ninja... live in shadow, move in silence"

nate

6473 posts

Uber Geek
+1 received by user: 458

Retired Mod

Trusted

Lifetime subscriber

#145146 8-Jul-2008 23:10

davide: Was staying at a place with a free WIFI network, but a friend we were staying with broke the WIFI by doing a port scan on the network. We think that the server shat itself, the network was still connecting, but the server wasn't giving out the IP address. Would this have been to do with the DHCP server? If so, how would we rectify the situation?

My suggestion would be to find new friends - your friend is obviously too smart for his own good.

Who does a port scan on free WIFI??