Re: wireless bridge...

You're trying to tell me that I wouldn't be interested in the wireless
traffic, just the MAC or IP? On the contrary, I find watching what they do
much more interesting.. Been a couple of times I've seen people on who fire
up MSN. So I fire up my own and have a nice friendly chat with them. :)
And their email can be interesting sometimes..

Nick.



"Jeff Liebermann" <jeffl@xxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:pogl2259pksvbt392n65nfk96054l5393r@xxxxxxxxxx
"Nick" <renaudfamily@xxxxxxxxxxxx> hath wroth:

I'm more interested in monitoring people who are piggybacking on my
network
which I am able to do now with the desktop and the card in promiscuous
mode
but won't be able to with the bridge. I think my solution will be to just
throw linux and the wireless card into an old laptop I have laying around
and use that.

That won't do much. If you're gonna run Linux, just fire up arpwatch
and look for any "new" MAC or IP addresses. You don't really need to
do that via wireless. All you really care about is who gets through
your wireless router. If they connect to the access point, but don't
get into your LAN, you probably don't care (unless you're worried
about them using your AP as a non-IP repeater). If you have a
seperate wireless access point and router, then you can just monitor
the traffic between the AP and the router. That will catch any
intruders that appear either on your LAN or go out to the internet.

Another problem with wireless sniffing is that you'll get a awful lot
of garbage. People driving by with their laptops active and set to
connect to anything. Wardrivers with Netstumbler. Door rattlers.
Just plain garbage. Just fire up Kismet for a while and see how much
useless data you collect. Hopefully, you'll have good filters if you
plan to do wireless monitoring. Finding the intruder among all that
junk, errr... data, is not easy.

--
Jeff Liebermann jeffl@xxxxxxxxxxxxxxxxxxxxxx
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558


.

Relevant Pages

  • Re: WEP and MAC Filter
    ... <set up the MAC filter; ... Could it be because the DHCP server is enabled, and the incoming wireless ... adaptors were on get dynamic IP when I try to connect them to the router? ... cabled to the 1-4 LAN ports, and the wireless PCs would be channeled ...
    (alt.internet.wireless)
  • Re: weird weird weird Linksys router
    ... Normally, when this happens, resetting the modem and router ... That fixed it (and my connection was way zippier than normal); ... including cloning its MAC Address to the same as my G4's MAC ... In my case it loses wireless connectivity ...
    (comp.sys.mac.comm)
  • RE: Wireless access
    ... authorized WLAN cards on the wireless router. ... change your MAC address (and effectively spoof the MAC address of another ... address of other cards connecting with the WLAN router. ...
    (Security-Basics)
  • Re: Separate IP address for VPC and MAC
    ... > my Powerbook to my wireless router then everything works fine and I ... > can now ping the MAC and the router from the DOS prompt. ...
    (microsoft.public.mac.virtualpc)
  • Re: wireless access point recommendation
    ... support Macs -- therefore I flatly refuse to buy or recommend their ... router to be rebooted several times a day. ... but it was useless as far as wireless goes. ... really the best for wired for Mac users. ...
    (comp.sys.mac.system)