How do I tell?

Archived from groups: alt.internet.wireless,microsoft.public.windows.networking.wireless (More info?)

In news:RVMnd.150$4R1.93@newsfe6-win.ntli.net "Karl Shaw"
<karlshaw4@hotmail.com> wrote:

> Got a 54G wireless network. Is there any software or a way in Windows
> that will tell me if I have someone "piggybacking" onto my Network?

If nothing else, your AP/router/whatever should have some way to display
the MAC addresses of all the systems that are connected.

--
Bert Hyman St. Paul, MN bert@visi.com

Archived from groups: alt.internet.wireless,microsoft.public.windows.networking.wireless (More info?)

just set the router to listed mac addresses only.
mike

"Bert Hyman" <bert@visi.com> wrote in message
news:Xns95A789A49B3C2VeebleFetzer@news.mpls.visi.com...
> In news:RVMnd.150$4R1.93@newsfe6-win.ntli.net "Karl Shaw"
> <karlshaw4@hotmail.com> wrote:
>
> > Got a 54G wireless network. Is there any software or a way in Windows
> > that will tell me if I have someone "piggybacking" onto my Network?
>
> If nothing else, your AP/router/whatever should have some way to display
> the MAC addresses of all the systems that are connected.
>
> --
> Bert Hyman St. Paul, MN bert@visi.com


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.798 / Virus Database: 542 - Release Date: 18/11/2004

Archived from groups: alt.internet.wireless,microsoft.public.windows.networking.wireless (More info?)

In news:tZMnd.174$QL1.171@newsfe3-gui.ntli.net "mikeFNB"
<moc.dlrowltn@FNB7G-ekim> wrote:

> just set the router to listed mac addresses only.

That's only if he doesn't want them in.

He just asked if there was a way to see.


> "Bert Hyman" <bert@visi.com> wrote in message
> news:Xns95A789A49B3C2VeebleFetzer@news.mpls.visi.com...
>> In news:RVMnd.150$4R1.93@newsfe6-win.ntli.net "Karl Shaw"
>> <karlshaw4@hotmail.com> wrote:
>>
>> > Got a 54G wireless network. Is there any software or a way in
>> > Windows that will tell me if I have someone "piggybacking" onto my
>> > Network?
>>
>> If nothing else, your AP/router/whatever should have some way to
>> display the MAC addresses of all the systems that are connected.




--
Bert Hyman St. Paul, MN bert@visi.com

Archived from groups: alt.internet.wireless,microsoft.public.windows.networking.wireless (More info?)

Karl Shaw wrote:

> Hi all,
>
> Got a 54G wireless network. Is there any software or a way in Windows
> that will tell me if I have someone "piggybacking" onto my Network?
>
> Cheers,
>
> Karl.

There are intrussion detection systems for Windows and wireless networks.
But these programs are for professional use and very expensive (>$1000). On
Linux the free wireless tool Kismet brings limited intrussion detection
functions with it.

There is only one way to watch the network from an other point then the AP.
You need to sniff all traffic on the channel. On Windows there are special
modified drivers needed to du so, on Linux most wireless drivers have the
needed functions biultin or can be patched.

Thomas

Archived from groups: alt.internet.wireless,microsoft.public.windows.networking.wireless (More info?)

Look at AirSnare...

http://home.comcast.net/~jay.deboer/airsnare/

--
Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no rights...

"Karl Shaw" <karlshaw4@hotmail.com> wrote in message news:RVMnd.150$4R1.93@newsfe6-win.ntli.net...
> Hi all,
>
> Got a 54G wireless network. Is there any software or a way in Windows that
> will tell me if I have someone "piggybacking" onto my Network?
>
> Cheers,
>
> Karl.
>
>

Archived from groups: alt.internet.wireless,microsoft.public.windows.networking.wireless (More info?)

On Sat, 20 Nov 2004 19:28:49 GMT, "Karl Shaw" <karlshaw4@hotmail.com>
wrote:

>Got a 54G wireless network. Is there any software or a way in Windows that
>will tell me if I have someone "piggybacking" onto my Network?

Is there some reason you didn't reveal the make and model of your
wireless router? They're not all the same and solutions of this sort
tend to be unique to the device. See what fits:

1. Arpwatch for Linux. Detects a new MAC address on the LAN. The
Windoze version is WinArpWatch:
http://www.arp-sk.org
2. Search Google for "Wireless Intrusion Detection" systems. There
are dozens of varying quality and prices.
3. SNMP. If your unspecified router supports SNMP broadcasts (many
Linksys do), then you can use an SNMP watch utility. I use:
http://www.logviewer.de.vu
and some other SNMP trap logging software.
4. MRTG and SNMP. I use a MIB browser to extract the number of
client connections from an access point and graph the number of
connections (and other things) using MRTG. The access point(s) must
support SNMP for this to work.
5. Wi-Fi Defense.
http://www.otosoftware.com/wireless.asp
I keep looking at this, but never have time to try it. Your turn.
6.

--
Jeff Liebermann jeffl@comix.santa-cruz.ca.us
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 AE6KS 831-336-2558

Archived from groups: alt.internet.wireless,microsoft.public.windows.networking.wireless (More info?)

"Jeff Liebermann" <jeffl@comix.santa-cruz.ca.us> wrote in message
news:u4k1q09r7v3u3gtgdmja9k5d4gg413kcb0@4ax.com...
> On Sat, 20 Nov 2004 19:28:49 GMT, "Karl Shaw" <karlshaw4@hotmail.com>
> wrote:
>
>>Got a 54G wireless network. Is there any software or a way in Windows
>>that
>>will tell me if I have someone "piggybacking" onto my Network?
>
> Is there some reason you didn't reveal the make and model of your
> wireless router? They're not all the same and solutions of this sort
> tend to be unique to the device. See what fits:
>
> 1. Arpwatch for Linux. Detects a new MAC address on the LAN. The
> Windoze version is WinArpWatch:
> http://www.arp-sk.org
> 2. Search Google for "Wireless Intrusion Detection" systems. There
> are dozens of varying quality and prices.
> 3. SNMP. If your unspecified router supports SNMP broadcasts (many
> Linksys do), then you can use an SNMP watch utility. I use:
> http://www.logviewer.de.vu
> and some other SNMP trap logging software.
> 4. MRTG and SNMP. I use a MIB browser to extract the number of
> client connections from an access point and graph the number of
> connections (and other things) using MRTG. The access point(s) must
> support SNMP for this to work.
> 5. Wi-Fi Defense.
> http://www.otosoftware.com/wireless.asp
> I keep looking at this, but never have time to try it. Your turn.
> 6.
>
> --
> Jeff Liebermann jeffl@comix.santa-cruz.ca.us
> 150 Felker St #D http://www.LearnByDestroying.com
> Santa Cruz CA 95060 AE6KS 831-336-2558

Sorry, my fault for not mentioning more detail. I have a Linksys WRT54G
running 4 computers, soon to be secured via WEP.

Jeff : I tried Wi-Fi Defense and liked it. It's a shame that it's $30 to
buy it though.

Does anyone know of any software similar to Wi-Fi Defense that is free?

Thanks.

Archived from groups: alt.internet.wireless,microsoft.public.windows.networking.wireless (More info?)

On Sun, 21 Nov 2004 21:33:49 GMT, "Karl Shaw" <karlshaw4@hotmail.com>
wrote:

>Sorry, my fault for not mentioning more detail. I have a Linksys WRT54G
>running 4 computers, soon to be secured via WEP.

Security is a good thing, or so I've been led to believe.

>Jeff : I tried Wi-Fi Defense and liked it. It's a shame that it's $30 to
>buy it though.

Surely it's worth $30. You'll probably spend days testing or writing
software just to save a lousy $30. No wonder programming isn't the
road to riches. Sigh...

>Does anyone know of any software similar to Wi-Fi Defense that is free?

See "Linksys Logging Utilities":
http://www.dslreports.com/faq/2613
I think all of them are free.
I still prefer Log Viewer:
http://www.logviewer.de.vu
although it's not intended to act as an alarm or security system. You
can add your own scripting or log file grovelling scripts to do the
actual detection of the added MAC address. Just about any SNMP trap
logger, SNMP event logger, or syslog simulator will work.
http://www.snmplink.org


--
Jeff Liebermann jeffl@comix.santa-cruz.ca.us
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 AE6KS 831-336-2558

Archived from groups: alt.internet.wireless,microsoft.public.windows.networking.wireless (More info?)

Hi

If you are using the Router's DHCP, there is a menu in the Router that would
show you the IPs that are logged.

If there is an IP that is not used by your computers then someone is
leaching.

Be sure to use the security measures just in case:
http://www.ezlan.net/Wireless_Security.html

Jack (MVP-Networking).





"Karl Shaw" <karlshaw4@hotmail.com> wrote in message
news:RVMnd.150$4R1.93@newsfe6-win.ntli.net...
> Hi all,
>
> Got a 54G wireless network. Is there any software or a way in Windows
that
> will tell me if I have someone "piggybacking" onto my Network?
>
> Cheers,
>
> Karl.
>
>

Archived from groups: alt.internet.wireless,microsoft.public.windows.networking.wireless (More info?)

"Jack" <www.ezlan.net&gt; wrote:
>If you are using the Router's DHCP, there is a menu in the Router that would
>show you the IPs that are logged.

Note, however, that someone programming up a static IP can still use
your network without the DHCP server's logging showing it. Use the
"Show me the connected MAC addresses" function instead of the "Show me
who I handed DHCP addresses out to" function.

And yeah, turn on at least 128-bit WEP with a good random hex key.

Archived from groups: alt.internet.wireless (More info?)

I cheaper way to ensure know one is on your network. disable DHCP and
configure the wireless clients manually. a drawback is that static IPs can
be a security risk.
"Thomas Krüger" <newsgroups@nospam.nowire.org> wrote in message
news:cno78l$grl$04$1@news.t-online.com...
> Karl Shaw wrote:
>
>> Hi all,
>>
>> Got a 54G wireless network. Is there any software or a way in Windows
>> that will tell me if I have someone "piggybacking" onto my Network?
>>
>> Cheers,
>>
>> Karl.
>
> There are intrussion detection systems for Windows and wireless networks.
> But these programs are for professional use and very expensive (>$1000).
> On
> Linux the free wireless tool Kismet brings limited intrussion detection
> functions with it.
>
> There is only one way to watch the network from an other point then the
> AP.
> You need to sniff all traffic on the channel. On Windows there are special
> modified drivers needed to du so, on Linux most wireless drivers have the
> needed functions biultin or can be patched.
>
> Thomas