Quote:
|
Originally Posted by Dutch
I'm not so sure they are spoofed MAC's per se... Check the logs, my SWAG is that the networks in question are AdHoc type nets (or probe's searching for the AdHoc net) and not Infrastructure.
If so, they are operating per the 802.11 specs, wrt the MAC's being random, and thereby able to have the same MAC as another device.
It's one of the reasons I see networks I've detected, suddenly appearing in places I never stumbled. Someone else detects a network, which has the same BSSID during AdHoc operation, that the network detected by me had, and during the next update of the Wigle Map, it has suddenly been teleported from Denmark, to Ohio or Australia..
Dutch
|
You might be right.
These were recorded in the same NS file on the same day within 35 minutes of each other.
Because knsgem was projecting the center of the nets in areas where no other nets existed, alerted my attention.
I'm not certain how NS handles a change detected in a networks configuration Ad-Hoc verse Infra-Stru. If the net is first seen as Ad-Hoc and later seen during the same drive as Infra-Stru, does NS update to the new config?
I'll have to see how Wigle triangulated the nets, assuming no one has updated them since. They were uploaded Sep 2005.
It looks as though the C-D points are the infamous HPSETUP I find all the time using the same MACs.
Code:
A-B network info
cnetwrk cnetype cessid cbssid cinfo cchnl cmaxrate cncoding cftime cltime cbstSig cbstnos cdatasz ciptype hd_vendor ccfile
273 Infrastr ME102 00:00:AA:BB:CC:0D na 1 11 na 20050914 20:59:41 20050914 21:33:51 -77 -99 12 na XEROX CORPOR 20050914153005.ns1
GPS # bssid lat lon alt spd heading fix signal noise ccftime ccfile prctime
2 00:00:AA:BB:CC:0D 29.781180 -95.761292 29.53 26.11 80.31000 8 -91 -96 20050914 21:33:45:95 20050914153005.ns1 20070104 07:27:43
3 00:00:AA:BB:CC:0D 29.781198 -95.761143 29.53 27.11 81.90000 8 -86 -98 20050914 21:33:46:68 20050914153005.ns1 20070104 07:27:43
4 00:00:AA:BB:CC:0D 29.781225 -95.760850 29.53 27.61 83.97000 8 -90 -98 20050914 21:33:48:04 20050914153005.ns1 20070104 07:27:43
5 00:00:AA:BB:CC:0D 29.781233 -95.760703 29.53 27.83 85.84000 8 -77 -93 20050914 21:33:49:81 20050914153005.ns1 20070104 07:27:43
6 00:00:AA:BB:CC:0D 29.880650 -95.548877 29.53 69.50 178.75000 8 -89 -99 20050914 20:59:50:25 20050914153005.ns1 20070104 07:27:43
7 00:00:AA:BB:CC:0D 29.880972 -95.548885 29.53 69.24 178.41000 8 -81 -97 20050914 20:59:49:35 20050914153005.ns1 20070104 07:27:43
8 00:00:AA:BB:CC:0D 29.881292 -95.548895 29.53 68.92 178.16000 8 -81 -97 20050914 20:59:48:40 20050914153005.ns1 20070104 07:27:43
9 00:00:AA:BB:CC:0D 29.881612 -95.548907 29.53 68.67 178.17000 8 -86 -97 20050914 20:59:47:54 20050914153005.ns1 20070104 07:27:43
10 00:00:AA:BB:CC:0D 29.881930 -95.548915 29.53 68.44 178.72000 8 -84 -95 20050914 20:59:46:93 20050914153005.ns1 20070104 07:27:43
11 00:00:AA:BB:CC:0D 29.882248 -95.548923 29.53 68.32 179.08000 8 -85 -98 20050914 20:59:45:59 20050914153005.ns1 20070104 07:27:43
12 00:00:AA:BB:CC:0D 29.882567 -95.548927 29.53 68.70 179.39000 8 -90 -98 20050914 20:59:44:71 20050914153005.ns1 20070104 07:27:43
13 00:00:AA:BB:CC:0D 29.883533 -95.548935 29.53 69.75 179.06000 8 -91 -96 20050914 20:59:41:39 20050914153005.ns1 20070104 07:27:43
C-D network info
cnetwrk cnetype cessid cbssid cinfo cchnl cmaxrate cncoding cftime cltime cbstSig cbstnos cdatasz ciptype hd_vendor ccfile
295 Ad-Hoc hpsetup 02:50:44:13:0A:20 na 6 11 na 20050914 21:01:12 20050914 21:10:12 -82 -99 12 na na 20050914153005.ns1
GPS # bssid lat lon alt spd heading fix signal noise ccftime ccfile prctime
17592 02:50:44:13:0A:20 29.784592 -95.598982 29.53 48.36 270.17000 8 -86 -97 20050914 21:10:03:02 20050914153005.ns1 20070104 07:27:43
17593 02:50:44:13:0A:20 29.784593 -95.599242 29.53 48.99 270.23000 8 -91 -97 20050914 21:10:03:75 20050914153005.ns1 20070104 07:27:43
17594 02:50:44:13:0A:20 29.784595 -95.599773 29.53 50.22 270.32000 8 -82 -96 20050914 21:10:05:93 20050914153005.ns1 20070104 07:27:43
17595 02:50:44:13:0A:20 29.784595 -95.599505 29.53 49.63 270.27000 8 -92 -95 20050914 21:10:04:95 20050914153005.ns1 20070104 07:27:43
17596 02:50:44:13:0A:20 29.784597 -95.600042 29.53 50.34 270.39000 8 -88 -96 20050914 21:10:06:54 20050914153005.ns1 20070104 07:27:43
17597 02:50:44:13:0A:20 29.784598 -95.600310 29.53 50.01 270.35000 8 -84 -98 20050914 21:10:07:61 20050914153005.ns1 20070104 07:27:43
17598 02:50:44:13:0A:20 29.784602 -95.601097 29.53 48.53 270.05000 8 -90 -97 20050914 21:10:10:42 20050914153005.ns1 20070104 07:27:43
17599 02:50:44:13:0A:20 29.784602 -95.600837 29.53 49.04 270.08000 8 -93 -96 20050914 21:10:10:03 20050914153005.ns1 20070104 07:27:43
17600 02:50:44:13:0A:20 29.784602 -95.600575 29.53 49.51 270.26000 8 -87 -98 20050914 21:10:08:20 20050914153005.ns1 20070104 07:27:43
17601 02:50:44:13:0A:20 29.862883 -95.563907 29.53 57.47 179.27000 8 -88 -97 20050914 21:01:17:07 20050914153005.ns1 20070104 07:27:43
17602 02:50:44:13:0A:20 29.863147 -95.563913 29.53 56.40 179.37000 8 -92 -99 20050914 21:01:15:72 20050914153005.ns1 20070104 07:27:43
17603 02:50:44:13:0A:20 29.863658 -95.563923 29.53 54.70 179.54000 8 -92 -96 20050914 21:01:12:83 20050914153005.ns1 20070104 07:27:43