Notification of new router/network connections

Hello,

Is there a way to be notified whenever a new connection is made on a
wireless router? Basically, be made aware whenever someone
establishes a connection/get assigned an IP on the network?

Thank you for the guidance,

Daniel

Daniel wrote:
> Hello,
>
> Is there a way to be notified whenever a new connection is made on a
> wireless router? Basically, be made aware whenever someone
> establishes a connection/get assigned an IP on the network?

Some routers may offer this feature, but the simplest is ARPWatch. Run
it on a linux box to get emailed every time a new MAC connects and/or
asks for an IP.

On Jan 16, 3:35*pm, Mark McIntyre <markmcint...@spamcop.net> wrote:
> Daniel wrote:
> > Hello,
>
> > Is there a way to be notified whenever a new connection is made on a
> > wireless router? *Basically, be made aware whenever someone
> > establishes a connection/get assigned an IP on the network?
>
> Some routers may offer this feature, but the simplest is ARPWatch. Run
> it on a linux box to get emailed every time a new MAC connects and/or
> asks for an IP.

I should have given a few more details.

Router: Linksys WRT54G Router
OS:WinXP

Daniel

Daniel <(E-Mail Removed)> hath wroth:

>On Jan 16, 3:35*pm, Mark McIntyre <markmcint...@spamcop.net> wrote:
>> Daniel wrote:
>> > Is there a way to be notified whenever a new connection is made on a
>> > wireless router? *Basically, be made aware whenever someone
>> > establishes a connection/get assigned an IP on the network?
>>
>> Some routers may offer this feature, but the simplest is ARPWatch. Run
>> it on a linux box to get emailed every time a new MAC connects and/or
>> asks for an IP.

>I should have given a few more details.
>Router: Linksys WRT54G Router
>OS:WinXP
>Daniel

OK. You've somewhat redeemed yourself. However, you didn't mention
the Linksys WRT54G hardware version or whether you're running the
stock Linksys firmware, or a more suitable alternative (DD-WRT).

Arpwatch is the right answer for Linux. There's a Windoze version,
but the original site seems to be gone. Archived at:
<http://sid.rstack.org/arp-sk/files/related/warpwatch.zip>
All it does is monitor the ARP cache.
Start -> run -> cmd <Enter>
arp -a
Be sure to read the Help. It's rather interesting. There's no alarm
for new connections so that's not going to work for your application.

You probably want AirSnare:
<http://home.comcast.net/~jay.deboer/airsnare/>

If you're running DD-WRT, you can run the Linux version of arpwatch on
the router itself, which is really convenient. The catch is that it
will display all attempts to connect, even if unsuccessful. In order
to negotiate a wireless encryption key, it first has to register a MAC
address in the MAC address table. Here's my output:
| # arp -a
| ? (192.168.1.11) at 00:02:B3:1E:39:ED [ether] on br0
| ? (192.168.1.50) at 00:40:05:C7:1C:44 [ether] on br0
| dsl-63-249-85-gateway.cruzio.com (63.249.85.1) at 00:10:67:000:9B [ether] on vlan1

The first is my desktop. The 2nd is a bridge to the neighbors. The
dsl-etc is my internet connection.

Also, Google for "Intrusion Detection System".

--
Jeff Liebermann (E-Mail Removed)
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558