Network Compromised?

Is there anyway to tell when someone unauthorized is on your network? In my
area I see anywhere from 3 to 5 wireless networks. All are secured except
one who someone conveniently chose to name "Linksys." I was always
suspicious of this network as I know information transferred on on unsecured
network is easily seen by others. I logged on this morning and observed 9
networks. The one name Linksys has a signal strength as strong as mine. The
others appeared weaker. Is it possible this person piggy-backed onto my
network? If so, to what extent is my vulnerability? I'm not sure but I
thought I had left dialog boxes open that later had closed. Is this
possible? If I drove around my area with my laptop could I possibly
determine the source of Linksys be monitoring the signal strength?

Well it depends on your network and your wireless access point. Generally
the access point or (wireless router something for the purpose of this
discussion) will have the ability to show who is connected to it. One area
to look for this would be under the DHCP server settings it may have an
option to show clients connected, look for an unknown mac address.

You could also press Ctrl-Alt-Del at the same time and bring up task
manager, this will show under the Users (tab) all users currently connected
to your computer.

--
David Hettel

Please post any reply as a follow-up message in the news group for everyone
to see. I'm sorry, but I don't answer questions addressed directly to me in
E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

DISCLAIMER: This posting is provided "AS IS" with no warranty of any kind,
either expressed or implied, made in relation to the accuracy, reliability
or content of this post. The author shall not be liable for any direct,
indirect, incidental or consequential damages arising out of the use of, or
inability to use, information or opinions expressed in this post and confers
no rights.



"incopass" <(E-Mail Removed)> wrote in message
news107D865-6C19-47AA-9194-(E-Mail Removed)...
> Is there anyway to tell when someone unauthorized is on your network? In
> my
> area I see anywhere from 3 to 5 wireless networks. All are secured except
> one who someone conveniently chose to name "Linksys." I was always
> suspicious of this network as I know information transferred on on
> unsecured
> network is easily seen by others. I logged on this morning and observed 9
> networks. The one name Linksys has a signal strength as strong as mine.
> The
> others appeared weaker. Is it possible this person piggy-backed onto my
> network? If so, to what extent is my vulnerability? I'm not sure but I
> thought I had left dialog boxes open that later had closed. Is this
> possible? If I drove around my area with my laptop could I possibly
> determine the source of Linksys be monitoring the signal strength?

You can use AirSnare to monitor suspected intrusions on your wireless
network...

http://home.comcast.net/~jay.deboer/airsnare/

The real key however is to properly secure your network so you don't have
intrusions...

http://theillustratednetwork.mvps.or...sSecurity.html

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...

"incopass" <(E-Mail Removed)> wrote in message
news107D865-6C19-47AA-9194-(E-Mail Removed)...
> Is there anyway to tell when someone unauthorized is on your network? In
> my
> area I see anywhere from 3 to 5 wireless networks. All are secured except
> one who someone conveniently chose to name "Linksys." I was always
> suspicious of this network as I know information transferred on on
> unsecured
> network is easily seen by others. I logged on this morning and observed 9
> networks. The one name Linksys has a signal strength as strong as mine.
> The
> others appeared weaker. Is it possible this person piggy-backed onto my
> network? If so, to what extent is my vulnerability? I'm not sure but I
> thought I had left dialog boxes open that later had closed. Is this
> possible? If I drove around my area with my laptop could I possibly
> determine the source of Linksys be monitoring the signal strength?

"incopass" wrote:
<...>
> Is it possible this person piggy-backed onto my
> network? If so, to what extent is my vulnerability?

Even if you see some AP in the air, your traffic will never go thru it
unless you connect to it. If you use good encryption (WPA2+AES), only the
connected AP sees your traffic decrypted, and can send data packets
to your machine.

Anybody else can listen to your (encrypted) traffic in the air -
but they will not be able to send anything to you.

Of course, there can be bugs and vulnerabilities in the WLAN device
driver that may let the attacker to send you data and/or break the
crypto, but this is another story...

> If I drove around my area with my laptop could I possibly
> determine the source of Linksys be monitoring the signal strength?

Yes

--PA

Hi

Linksys is the default name for Wireless Cable/DSL Router that is sold by
(guess what ) Linksys.

If your Wireless Network is secured, and other around you are Not it has
nothing to do with your Network, and it does not compromise your network.

So secure your network and let others worry about their networks.

Why I see Wireless connections that are not mine in my Wireless Network
display?

http://www.ezlan.net/faq.html#signal

Wireless Security - http://www.ezlan.net/Wireless_Security.html

WEP, WPA, and WPA2 - http://www.ezlan.net/wpa_wep.html

Jack (MVP-Networking).



"incopass" <(E-Mail Removed)> wrote in message
news107D865-6C19-47AA-9194-(E-Mail Removed)...
> Is there anyway to tell when someone unauthorized is on your network? In
> my
> area I see anywhere from 3 to 5 wireless networks. All are secured except
> one who someone conveniently chose to name "Linksys." I was always
> suspicious of this network as I know information transferred on on
> unsecured
> network is easily seen by others. I logged on this morning and observed 9
> networks. The one name Linksys has a signal strength as strong as mine.
> The
> others appeared weaker. Is it possible this person piggy-backed onto my
> network? If so, to what extent is my vulnerability? I'm not sure but I
> thought I had left dialog boxes open that later had closed. Is this
> possible? If I drove around my area with my laptop could I possibly
> determine the source of Linksys be monitoring the signal strength?