Quote:
Originally posted by jsicuran
Cool DigitalMDX, one question in regards to the net send function. Is it possible that you can have a version that will send out the message automatically once a MAC/IP not on the trusted list is encountered? No intervention necessary. I have to see if there is some other utility that can scan your log file and email or net send me any occurrences when they happen.
Thanks...
/JS
|
The auto send feature is something I have been thinking about, the only problem is AirSnare has MAC and IP information long before the person has even logged into Windows (say, if you were to bootup Windows in the area of the AP). So there would have to be some delay from the time of detection to the message being sent. (I'm thinking something like X number of packets from the Intruder MAC then send the message). As to the e-mail option. This is something else I've been thinking about adding, I just need to do a little research. That way you could send an e-mail on a detection to either an e-mail account or to a pager, since most pagers have an e-mail address through the pager service provider.
Also, for anyone else reading this, a minor update will be posted this evening which allows you to bring up the AirHorn module when you click on "Send Message" instead of getting a message that says "Sorry, no IP to send to"... that way you'll be able to play with the AirHorn piece without having to wait for an intrusion.
Thanks,
Jay