How do I tell?

Hi all,

Got a 54G wireless network. Is there any software or a way in Windows that
will tell me if I have someone "piggybacking" onto my Network?

Cheers,

Karl.

In news:RVMnd.150$(E-Mail Removed) "Karl Shaw"
<(E-Mail Removed)> wrote:

> Got a 54G wireless network. Is there any software or a way in Windows
> that will tell me if I have someone "piggybacking" onto my Network?

If nothing else, your AP/router/whatever should have some way to display
the MAC addresses of all the systems that are connected.

--
Bert Hyman St. Paul, MN (E-Mail Removed)

just set the router to listed mac addresses only.
mike

"Bert Hyman" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) om...
> In news:RVMnd.150$(E-Mail Removed) "Karl Shaw"
> <(E-Mail Removed)> wrote:
>
> > Got a 54G wireless network. Is there any software or a way in Windows
> > that will tell me if I have someone "piggybacking" onto my Network?
>
> If nothing else, your AP/router/whatever should have some way to display
> the MAC addresses of all the systems that are connected.
>
> --
> Bert Hyman St. Paul, MN (E-Mail Removed)


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.798 / Virus Database: 542 - Release Date: 18/11/2004

In news:tZMnd.174$(E-Mail Removed) "mikeFNB"
<moc.dlrowltn@FNB7G-ekim> wrote:

> just set the router to listed mac addresses only.

That's only if he doesn't want them in.

He just asked if there was a way to see.


> "Bert Hyman" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed) om...
>> In news:RVMnd.150$(E-Mail Removed) "Karl Shaw"
>> <(E-Mail Removed)> wrote:
>>
>> > Got a 54G wireless network. Is there any software or a way in
>> > Windows that will tell me if I have someone "piggybacking" onto my
>> > Network?
>>
>> If nothing else, your AP/router/whatever should have some way to
>> display the MAC addresses of all the systems that are connected.




--
Bert Hyman St. Paul, MN (E-Mail Removed)

Karl Shaw wrote:

> Hi all,
>
> Got a 54G wireless network. Is there any software or a way in Windows
> that will tell me if I have someone "piggybacking" onto my Network?
>
> Cheers,
>
> Karl.

There are intrussion detection systems for Windows and wireless networks.
But these programs are for professional use and very expensive (>$1000). On
Linux the free wireless tool Kismet brings limited intrussion detection
functions with it.

There is only one way to watch the network from an other point then the AP.
You need to sniff all traffic on the channel. On Windows there are special
modified drivers needed to du so, on Linux most wireless drivers have the
needed functions biultin or can be patched.

Thomas

Look at AirSnare...

http://home.comcast.net/~jay.deboer/airsnare/

--
Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no rights...

"Karl Shaw" <(E-Mail Removed)> wrote in message news:RVMnd.150$(E-Mail Removed)...
> Hi all,
>
> Got a 54G wireless network. Is there any software or a way in Windows that
> will tell me if I have someone "piggybacking" onto my Network?
>
> Cheers,
>
> Karl.
>
>

On Sat, 20 Nov 2004 19:28:49 GMT, "Karl Shaw" <(E-Mail Removed)>
wrote:

>Got a 54G wireless network. Is there any software or a way in Windows that
>will tell me if I have someone "piggybacking" onto my Network?

Is there some reason you didn't reveal the make and model of your
wireless router? They're not all the same and solutions of this sort
tend to be unique to the device. See what fits:

1. Arpwatch for Linux. Detects a new MAC address on the LAN. The
Windoze version is WinArpWatch:
http://www.arp-sk.org
2. Search Google for "Wireless Intrusion Detection" systems. There
are dozens of varying quality and prices.
3. SNMP. If your unspecified router supports SNMP broadcasts (many
Linksys do), then you can use an SNMP watch utility. I use:
http://www.logviewer.de.vu
and some other SNMP trap logging software.
4. MRTG and SNMP. I use a MIB browser to extract the number of
client connections from an access point and graph the number of
connections (and other things) using MRTG. The access point(s) must
support SNMP for this to work.
5. Wi-Fi Defense.
http://www.otosoftware.com/wireless.asp
I keep looking at this, but never have time to try it. Your turn.
6.

--
Jeff Liebermann (E-Mail Removed)
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 AE6KS 831-336-2558

"Jeff Liebermann" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> On Sat, 20 Nov 2004 19:28:49 GMT, "Karl Shaw" <(E-Mail Removed)>
> wrote:
>
>>Got a 54G wireless network. Is there any software or a way in Windows
>>that
>>will tell me if I have someone "piggybacking" onto my Network?
>
> Is there some reason you didn't reveal the make and model of your
> wireless router? They're not all the same and solutions of this sort
> tend to be unique to the device. See what fits:
>
> 1. Arpwatch for Linux. Detects a new MAC address on the LAN. The
> Windoze version is WinArpWatch:
> http://www.arp-sk.org
> 2. Search Google for "Wireless Intrusion Detection" systems. There
> are dozens of varying quality and prices.
> 3. SNMP. If your unspecified router supports SNMP broadcasts (many
> Linksys do), then you can use an SNMP watch utility. I use:
> http://www.logviewer.de.vu
> and some other SNMP trap logging software.
> 4. MRTG and SNMP. I use a MIB browser to extract the number of
> client connections from an access point and graph the number of
> connections (and other things) using MRTG. The access point(s) must
> support SNMP for this to work.
> 5. Wi-Fi Defense.
> http://www.otosoftware.com/wireless.asp
> I keep looking at this, but never have time to try it. Your turn.
> 6.
>
> --
> Jeff Liebermann (E-Mail Removed)
> 150 Felker St #D http://www.LearnByDestroying.com
> Santa Cruz CA 95060 AE6KS 831-336-2558

Sorry, my fault for not mentioning more detail. I have a Linksys WRT54G
running 4 computers, soon to be secured via WEP.

Jeff : I tried Wi-Fi Defense and liked it. It's a shame that it's $30 to
buy it though.

Does anyone know of any software similar to Wi-Fi Defense that is free?

Thanks.

On Sun, 21 Nov 2004 21:33:49 GMT, "Karl Shaw" <(E-Mail Removed)>
wrote:

>Sorry, my fault for not mentioning more detail. I have a Linksys WRT54G
>running 4 computers, soon to be secured via WEP.

Security is a good thing, or so I've been led to believe.

>Jeff : I tried Wi-Fi Defense and liked it. It's a shame that it's $30 to
>buy it though.

Surely it's worth $30. You'll probably spend days testing or writing
software just to save a lousy $30. No wonder programming isn't the
road to riches. Sigh...

>Does anyone know of any software similar to Wi-Fi Defense that is free?

See "Linksys Logging Utilities":
http://www.dslreports.com/faq/2613
I think all of them are free.
I still prefer Log Viewer:
http://www.logviewer.de.vu
although it's not intended to act as an alarm or security system. You
can add your own scripting or log file grovelling scripts to do the
actual detection of the added MAC address. Just about any SNMP trap
logger, SNMP event logger, or syslog simulator will work.
http://www.snmplink.org


--
Jeff Liebermann (E-Mail Removed)
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 AE6KS 831-336-2558

Hi

If you are using the Router's DHCP, there is a menu in the Router that would
show you the IPs that are logged.

If there is an IP that is not used by your computers then someone is
leaching.

Be sure to use the security measures just in case:
http://www.ezlan.net/Wireless_Security.html

Jack (MVP-Networking).





"Karl Shaw" <(E-Mail Removed)> wrote in message
news:RVMnd.150$(E-Mail Removed)...
> Hi all,
>
> Got a 54G wireless network. Is there any software or a way in Windows
that
> will tell me if I have someone "piggybacking" onto my Network?
>
> Cheers,
>
> Karl.
>
>