A few days ago I posted a video demonstrating how to use reaver, by Tactical Network Solutions, to brute force the WPS PIN on a wireless router. During the video, I also demonstrated how you can check the beacon frames from a wireless router to determine if WPS was running. You can also check probe responses but that's neither here nor there.
Since posting the video, I have still been asked by quite a few people, both online and in-person, how they can tell if WPS is running on their wireless router. Unfortunately, there isn't a really easy way but a new tool, called Walsh, was included in the reaver-1.3 release which should make it easier for some people to find an answer to this question. Here is a quick demonstration of how the tool works:
Unfortunately, this method still requires a little bit of technical skill, but at least it's a little quicker than parsing cap files. (If you're interested in looking at some cap files, please check out the post where we take a look at Reaver in the air.)