Help, possible security problem

For the past 2 wks, at various times, our Wi-Fi system has gone
through the floor (decent signal strength, but horrible link quality).
For the past 2 days, I've discovered a system on a different channel,
with no encryption (our system has 128 bit WEP), in ad-hoc mode, but
with the same SSID. According to my bridge, this ad-hoc point has had
different MAC addresses. My instincts say someone is trying to
capture our signal. I will be changing out SSID, WEP passphrase, and
channel tomorrow. But it bothers me someone maybe trying to hack us.
Worst part, I have no good way of scanning for this joker.

Ideas???
Scott

Do you have an Atheros chipset? If so, turn it to US frequencies (if in
europe) or vica versa and then enable 108 Mbps

Jam him


"RangerScott" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) om...
> For the past 2 wks, at various times, our Wi-Fi system has gone
> through the floor (decent signal strength, but horrible link quality).
> For the past 2 days, I've discovered a system on a different channel,
> with no encryption (our system has 128 bit WEP), in ad-hoc mode, but
> with the same SSID. According to my bridge, this ad-hoc point has had
> different MAC addresses. My instincts say someone is trying to
> capture our signal. I will be changing out SSID, WEP passphrase, and
> channel tomorrow. But it bothers me someone maybe trying to hack us.
> Worst part, I have no good way of scanning for this joker.
>
> Ideas???
> Scott

Could it be one of you employees hard-coding the AP's SSID into their card
and then turning on ad-hoc mode? (the usual "I can't connect to the AP;
maybe I need to enter its SSID into my card's configuration; that's still
not working so I'll switch the card to ad-hoc mode")

-Yves

"RangerScott" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) om...
> For the past 2 wks, at various times, our Wi-Fi system has gone
> through the floor (decent signal strength, but horrible link quality).
> For the past 2 days, I've discovered a system on a different channel,
> with no encryption (our system has 128 bit WEP), in ad-hoc mode, but
> with the same SSID. According to my bridge, this ad-hoc point has had
> different MAC addresses. My instincts say someone is trying to
> capture our signal. I will be changing out SSID, WEP passphrase, and
> channel tomorrow. But it bothers me someone maybe trying to hack us.
> Worst part, I have no good way of scanning for this joker.
>
> Ideas???
> Scott