|
|
|||||||
| Register | Search | Today's Posts | Mark Forums Read |
 |
|
|
LinkBack | Thread Tools | Display Modes |
09-07-2001
|
#1 (permalink) |
|
Posts: n/a
|
Wireless PCI cards and Netstumbler - Experiences?
I would like to get a Wireless PCI card and to put in my desktop and run NS 24/7 to see if I can pick up anyone trying to 'stumble' upon me. Problem is, I RARELY pick up p2p networks with my current Orinoco Gold and Netstumbler combo. I stumble with a friend of mine (laptops next to each other) and we never pick each other up.
Is there a particular PCI card that might work better than another for this capability? Keep in mind, my intensions are for securing my own network (which I obviously have WEP on - but still). If I hear my 'Alarm' go off and I see someone sitting in front of my house for 10 minutes, I might try and talk with them. Ideas? DeFrane |
|
|
09-07-2001
|
#2 (permalink) |
|
Posts: n/a
|
I've been thinking about the same....
I've been considering the same kind of problem (now that WEP is useless) - how can I be 100% certain that no one else has associated with my AP?
I thought of doing a bit of programming to scan my internal IP range and compare it with a list of MAC addresses that I know are good (both wired and wireless). If any other device suddenly appeared, I could trigger an alarm of some sort and investigate. I think corporations that implement wireless networks would find such a tool useful as well. Actually, it would be fun to turn WEP off, and do the same exercise for a while - to see how many unauthorized people associate with your AP in a given day/week/month. I'm not the best programmer around - most of my stuff is VBScript/ASP, but I'll tinker around a bit. Anyone else have any thoughts? -Toomer |
|
|
|
09-07-2001
|
#4 (permalink) |
|
Posts: n/a
|
Not sure if they do or not, but if you set up your AP to hand out a DHCP lease (and they grab one), you will almost surely get the MAC they are using. Not that it would do you any good. Even if it wasn't possible to change MACs, what good would it do to capture one?
|
|
|
|
09-07-2001
|
#5 (permalink) |
|
Posts: n/a
|
What good would it do?
Well, in my house, I use a lot of X-10 powerline equipment to turn lights on/off, appliances, etc. It is integrated into my computer system -- I could have it so that if a phantom MAC appeared on my network, the system would kill power to the AP immediately thus blocking the intruder out.
Or - slightly less high-tech - I could simply have it email me a page on my cellphone letting me know that an unknown MAC had appeared. That way I could take corrective action. -Toomer |
|
|
|
09-12-2001
|
#6 (permalink) |
|
Posts: n/a
|
Why 2 stumblers don't see each other
The reason you can be next to another stumbler and not see them is net stumbler looks for broadcasts from an open network advertising the network name, if you are stumbling your card does not have an established name, it is simply listening for any network. Detecting a "war driver" by running a local copy of net stumbler will not work. A much better idea is as one poster said to look for an unknown MAC address on your network, when a wireless card finds a network it does attempt to connect from my experiance and your MAC address will show on a network scan.
|
|
|
Linear Mode
