Odd IP range in Kismet

beakmyn · 11-27-2004

Here's the setup:

AP: DWL-614
Public IP: 65.37.57.45
Internal IP: 192.168.200.1

Laptop #1
Win XP
NetStumbler 0.40
Orinoco (rebranded) Gold Card

Laptop #2
Fedora Core 2
Kismet
Orinoco (rebranded) Gold Card

Here's my Kismet output (MAC changed just because):

Code:

Network 1: "fjords" BSSID: "00:00:00:00:00:00"
    Type     : infrastructure
    Carrier  : 802.11b
    Info     : "None"
    Channel  : 06
    WEP      : "No"
    Maxrate  : 22.0
    LLC      : 294
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Dupe IV  : 0
    Total    : 294
    First    : "Sat Nov 27 10:15:58 2004"
    Last     : "Sat Nov 27 10:22:13 2004"
    Min Loc: Lat 90.000000 Lon 180.000000 Alt 0.000000 Spd 0.000000
    Max Loc: Lat -90.000000 Lon -180.000000 Alt 0.000000 Spd 0.000000
    Address found via TCP 216.86.143.19

Network 2: "^L^V^R^F^^^S^V" 
BSSID: "00:00:00:00:00:00"
    Type     : probe
    Carrier  : 802.11b
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 194
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Dupe IV  : 0
    Total    : 194
    First    : "Sat Nov 27 10:16:01 2004"
    Last     : "Sat Nov 27 10:22:08 2004"
    Min Loc: Lat 90.000000 Lon 180.000000 Alt 0.000000 Spd 0.000000
    Max Loc: Lat -90.000000 Lon -180.000000 Alt 0.000000 Spd 0.000000
    Address found via TCP 192.168.200.102

So it thinks Network 1 is my AP, It got the right MAC but where did it come up with the Address found via TCP 216.86.143.19 That's nowhere close to anything on this network. I tried searching the Kismet Wireless forum but only came up with the 0.0.0.0 which is irrelevent.

Network 2 is the laptop running NetStumbler. Since my MAC filters allow it, it was given an IP by my AP.

I had WEP turned off during these tests, and went back through my logs to make sure there wasn't anyone else accessing my AP at the time.

What say you?

Re@liTy · 11-27-2004

I thought that was when Kismet finds your AP via TCP transmissions, based off of the IP asigned to you by your ISP ??

I may well have been wrong all this time though..............I usually am

11-27-2004	#1 (permalink)
beakmyn root\.workspace\.garbage. Join Date: Aug 2003 Posts: 4,805	Odd IP range in Kismet Here's the setup: AP: DWL-614 Public IP: 65.37.57.45 Internal IP: 192.168.200.1 Laptop #1 Win XP NetStumbler 0.40 Orinoco (rebranded) Gold Card Laptop #2 Fedora Core 2 Kismet Orinoco (rebranded) Gold Card Here's my Kismet output (MAC changed just because): Code: Network 1: "fjords" BSSID: "00:00:00:00:00:00" Type : infrastructure Carrier : 802.11b Info : "None" Channel : 06 WEP : "No" Maxrate : 22.0 LLC : 294 Data : 0 Crypt : 0 Weak : 0 Dupe IV : 0 Total : 294 First : "Sat Nov 27 10:15:58 2004" Last : "Sat Nov 27 10:22:13 2004" Min Loc: Lat 90.000000 Lon 180.000000 Alt 0.000000 Spd 0.000000 Max Loc: Lat -90.000000 Lon -180.000000 Alt 0.000000 Spd 0.000000 Address found via TCP 216.86.143.19 Network 2: "^L^V^R^F^^^S^V" BSSID: "00:00:00:00:00:00" Type : probe Carrier : 802.11b Info : "None" Channel : 00 WEP : "No" Maxrate : 11.0 LLC : 194 Data : 0 Crypt : 0 Weak : 0 Dupe IV : 0 Total : 194 First : "Sat Nov 27 10:16:01 2004" Last : "Sat Nov 27 10:22:08 2004" Min Loc: Lat 90.000000 Lon 180.000000 Alt 0.000000 Spd 0.000000 Max Loc: Lat -90.000000 Lon -180.000000 Alt 0.000000 Spd 0.000000 Address found via TCP 192.168.200.102 So it thinks Network 1 is my AP, It got the right MAC but where did it come up with the Address found via TCP 216.86.143.19 That's nowhere close to anything on this network. I tried searching the Kismet Wireless forum but only came up with the 0.0.0.0 which is irrelevent. Network 2 is the laptop running NetStumbler. Since my MAC filters allow it, it was given an IP by my AP. I had WEP turned off during these tests, and went back through my logs to make sure there wasn't anyone else accessing my AP at the time. What say you? __________________ Daughter with arms inside shirt: "Daddy I'm not Armish" ┌──────────────────────────────┐ ╞ NS Icons Explained\|et hoc genus omne ╡ └──────────────────────────────┘

11-27-2004	#2 (permalink)
Re@liTy Registered Member Join Date: Jul 2004 Location: Brighton - U.K. Posts: 65	I thought that was when Kismet finds your AP via TCP transmissions, based off of the IP asigned to you by your ISP ?? I may well have been wrong all this time though..............I usually am __________________ I started out with nothing..............and I've still got most of it left.....

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode