Detecting unwanted home wireless network connections from your neighbors

Does anyone of software to tell HOW MANY connections are to your home
wireless router?

I am setting up my very first wireless router and I would like to know when
someone has connected to my network without my knowledge. Is there windows
freeware to tell us the hostname, ip address, and mac address of all
computers connected to a router?

All I can see looking at the router itself is the start and end dhcp number
but this isn't definitive as machines can come and go on the local network.

I've googled and read tons of stuff on how to set up the Linksys WRT54G
wireless home router, for example - limiting the DHCP number to the precise
number of computers on the home network.

But I can't find the screen or software which shows me exactly who is
connected to my router's internet connection.

Where is the software that tells me WHO is connected to my router?

Malke <(E-Mail Removed)> hath wroth:

>Does anyone of software to tell HOW MANY connections are to your home
>wireless router?
(...)
>Where is the software that tells me WHO is connected to my router?

How many and who are quite different. It's not easy with the WRT54G
because there is no seperate wireless status page. The best you can
do is the DHCP client table at:
<http://www.linksysdata.com/ui/WRT54G/v5/1.00.6/StaLan.htm>
which doesn't show any connection that has a self assigned static IP
address.

The WRT54G also does not directly support syslogd, NetFlow, or SNMP,
so you can't use a router monitor utility to do the job.

One thing you can do is sniff the traffic between the WRT54G and your
cable or DSL modem using something like AirSnare:
<http://home.comcast.net/~jay.deboer/airsnare/>
or other intrusion detection system.

You can also replace the firmware in your router with an open source
replacement that does offer syslogd, SNMP, and usable status pages.
<http://www.dd-wrt.com>
<http://www.OpenWRT.org>
This should give you a fair simulation of what's available with
DD-WRT. See that various Status pages:
<http://www.informatione.gmxhome.de/DDWRT/Standard/V23final/index.html>

This is my home and office WRT54G routers running DD-WRT v23 sp2.
<https://office.LearnByDestroying.com:8080>
<https://home.LearnByDestroying.com:8080>
The wireless clients list (and DHCP table) are at the bottom of the
page. Note that not all WRT54G hardware mutations can handle
alternative firmware.

>I am setting up my very first wireless router and I would like to know when
>someone has connected to my network without my knowledge. Is there windows
>freeware to tell us the hostname, ip address, and mac address of all
>computers connected to a router?

I think AirSnare will do what you want. Also see:
<http://www.linklogger.com>
<http://sonic.net/wallwatcher/>
<http://www.dd-wrt.com/dd-wrtv2/rflow.php> (requires dd-wrt)
<http://svs.sv.funpic.de/> (may not work with all WRT54G versions)
Then, if you feel ambitious, try DD-WRT firmware.

>All I can see looking at the router itself is the start and end dhcp number
>but this isn't definitive as machines can come and go on the local network.
>
>I've googled and read tons of stuff on how to set up the Linksys WRT54G
>wireless home router, for example - limiting the DHCP number to the precise
>number of computers on the home network.
>
>But I can't find the screen or software which shows me exactly who is
>connected to my router's internet connection.
>

--
Jeff Liebermann (E-Mail Removed)
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558

In article <jUFai.13377$(E-Mail Removed) >,
(E-Mail Removed)lid says...
> Does anyone of software to tell HOW MANY connections are to your home
> wireless router?
>
======================

Why go to all the trouble of detection? Why not set up your system with
a decent 128-bit WEP security code?

Lord Possum wrote:
> In article <jUFai.13377$(E-Mail Removed) >,
> (E-Mail Removed)lid says...
>> Does anyone of software to tell HOW MANY connections are to your home
>> wireless router?
>>
> ======================
>
> Why go to all the trouble of detection? Why not set up your system with
> a decent 128-bit WEP security code?

Fwiw, WEP has been superseded by the WPA & WPA2 security systems. A
decent overview as to the whys and wherefores can be had at:
<http://en.wikipedia.org/wiki/WPA2>

-Craig

On Sat, 09 Jun 2007 15:58:04 -0700, Jeff Liebermann wrote:

> One thing you can do is sniff the traffic between the WRT54G and your
> cable or DSL modem using something like AirSnare:
> <http://home.comcast.net/~jay.deboer/airsnare/>
> or other intrusion detection system.

Thank you very much Jeff Lieberman.

It's rare to see such a definitive response to a users' question as yours.

You're in the top few percent of helpful posters! I, for one, will check
out each of your recommendations, in order, starting with AirSnare freeware
to detect who is connected to my wireless router!

On Sat, 09 Jun 2007 17:03:31 -0700, Craig wrote:

> Fwiw, WEP has been superseded by the WPA & WPA2 security systems. A
> decent overview as to the whys and wherefores can be had at:
> <http://en.wikipedia.org/wiki/WPA2>

I don't seem to have an option for WPA2 on my Windows XP Service Pack 2 for
some reason. Did I miss something?

How do I know if I can use WPA2 on my PC when the option does not show up
in the wireless network?

Malke <(E-Mail Removed)> hath wroth:

>On Sat, 09 Jun 2007 15:58:04 -0700, Jeff Liebermann wrote:
>
>> One thing you can do is sniff the traffic between the WRT54G and your
>> cable or DSL modem using something like AirSnare:
>> <http://home.comcast.net/~jay.deboer/airsnare/>
>> or other intrusion detection system.
>
>Thank you very much Jeff Lieberman.

Y'er welcome, but I do wish you would spell my name correctly. It has
two n's at the end. The 2nd one is a spare in case I get rear ended.

>It's rare to see such a definitive response to a users' question as yours.

I was bored. However, don't worry. It won't happen again.

>You're in the top few percent of helpful posters!

I've been told I am beyond help(ful). Be careful, I'm also fairly
sloppy and do make some mistakes.

>I, for one, will check
>out each of your recommendations, in order, starting with AirSnare freeware
>to detect who is connected to my wireless router!

If you sniff traffic between the modem and router, you'll need to
install some kind of a hub in between. Note that I said hub, not
switch. A switch will not show the traffic on the monitor port. A
hub has all the traffic appearing at the port. An old 10baseT hub
should work fine for all but the fastest cable modem systems.

You can also build a crud passive ethernet tap. (I carry one in my
troubleshooting case).
<http://www.snort.org/docs/tap/>
It took me several tries to get the wiring correct so be careful.

Good luck.

--
Jeff Liebermann (E-Mail Removed)
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558

Malke <(E-Mail Removed)> hath wroth:

>On Sat, 09 Jun 2007 17:03:31 -0700, Craig wrote:
>
>> Fwiw, WEP has been superseded by the WPA & WPA2 security systems. A
>> decent overview as to the whys and wherefores can be had at:
>> <http://en.wikipedia.org/wiki/WPA2>
>
>I don't seem to have an option for WPA2 on my Windows XP Service Pack 2 for
>some reason. Did I miss something?

Yep. MS was a bit late on adding WPA2. They still haven't added all
the multitude of authentication schemes. You need yet another update.
See:
<http://support.microsoft.com/kb/893357>
<http://www.microsoft.com/windowsxp/using/security/expert/bowman_wirelesssecurity.mspx>
You might want to run:
<http://windowsupdate.microsoft.com>
and select "custom" instead of the usual "recommended". Then install
the kitchen sink.

>How do I know if I can use WPA2 on my PC when the option does not show up
>in the wireless network?

Install KB893357.
--
Jeff Liebermann (E-Mail Removed)
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558

On Sun, 10 Jun 2007 00:08:27 GMT, Malke wrote:

>> One thing you can do is sniff the traffic between the WRT54G and your
>> cable or DSL modem using something like AirSnare:
>> <http://home.comcast.net/~jay.deboer/airsnare/>
>> or other intrusion detection system.
>
> Thank you very much Jeff Lieberman.
>
> It's rare to see such a definitive response to a users' question as yours.
>
> You're in the top few percent of helpful posters! I, for one, will check
> out each of your recommendations, in order, startin

Kissbuttware
--
This is what I looked like after John "Heartless" Corliss called me a
troll.
http://tinyurl.com/2dympt

"Jeff Liebermann" <(E-Mail Removed)> wrote in message
>
> You can also build a crud passive ethernet tap. (I carry one in my
> troubleshooting case).
> <http://www.snort.org/docs/tap/>
> It took me several tries to get the wiring correct so be careful.

This looks pretty simple to build however I am curious to know why one
couldn't make this work in full duplex with three jacks?
It seems having three interfaces would hash something up..
I could walk to my work van and have one built in just a few minutes and
test it I suppose.

Any thoughts?

Adair