Are WiFi clients detectable, like APs?

I can fire up an app like NetStumbler and see all the APs within
range.

Is there something similar which detects clients?

--
Bert Hyman | St. Paul, MN | (E-Mail Removed)

On 5 Dec 2005 18:05:05 GMT, Bert Hyman <(E-Mail Removed)> wrote:

>I can fire up an app like NetStumbler and see all the APs within
>range.
>Is there something similar which detects clients?

Yes. A passive sniffer like Kismet (under Linux).

--
Jeff Liebermann (E-Mail Removed)
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558

"Jeff Liebermann" <(E-Mail Removed)> schreef in bericht
news:(E-Mail Removed)...
> On 5 Dec 2005 18:05:05 GMT, Bert Hyman <(E-Mail Removed)> wrote:
>
> >I can fire up an app like NetStumbler and see all the APs within
> >range.
> >Is there something similar which detects clients?
>
> Yes. A passive sniffer like Kismet (under Linux).
>
> --
> Jeff Liebermann (E-Mail Removed)
> 150 Felker St #D http://www.LearnByDestroying.com
> Santa Cruz CA 95060 http://802.11junk.com
> Skype: JeffLiebermann AE6KS 831-336-2558

I asked the same question some time ago, but nobody seems to know.
Does Kismet really detects clients ?!

Ron wrote:
> "Jeff Liebermann" <(E-Mail Removed)> schreef in bericht
> news:(E-Mail Removed)...
>
>>On 5 Dec 2005 18:05:05 GMT, Bert Hyman <(E-Mail Removed)> wrote:
>>
>>
>>>I can fire up an app like NetStumbler and see all the APs within
>>>range.
>>>Is there something similar which detects clients?
>>
>>Yes. A passive sniffer like Kismet (under Linux).
>>
>>--
>>Jeff Liebermann (E-Mail Removed)
>>150 Felker St #D http://www.LearnByDestroying.com
>>Santa Cruz CA 95060 http://802.11junk.com
>>Skype: JeffLiebermann AE6KS 831-336-2558
>
>
> I asked the same question some time ago, but nobody seems to know.
> Does Kismet really detects clients ?!
>
>

http://www.kismetwireless.net/documentation.shtml

The clients window has a similar selection of columns which can be enabled:
crypt Number of encrypted data packets transfered by client
data Number of data packets transfered by client
decay Displays '!', '.', or ' ' based on network activity
ip Last seen IP used by client
mac MAC address of client
manuf Manufacturer of client (if known)
maxrate Maximum rate client seen transfering
noise Last seen noise level of client
signal Last seen signal level of client
size Amount of data transferred by client
type Type of client (Established, To-DS, From-DS, etc)
weak Number of packets which appear to have weak IVs

Rob

--
http://www.childhooddiseases.org/
http://www.grid.org/projects/cancer/

Rob <(E-Mail Removed)> wrote:
> Ron wrote:
>> "Jeff Liebermann" <(E-Mail Removed)> schreef in bericht
>> news:(E-Mail Removed)...
>>
>>>On 5 Dec 2005 18:05:05 GMT, Bert Hyman <(E-Mail Removed)> wrote:
>>>
>>>
>>>>I can fire up an app like NetStumbler and see all the APs within
>>>>range.
>>>>Is there something similar which detects clients?
>>>
>>>Yes. A passive sniffer like Kismet (under Linux).
>>>
>>>--
>>>Jeff Liebermann (E-Mail Removed)
>>>150 Felker St #D http://www.LearnByDestroying.com
>>>Santa Cruz CA 95060 http://802.11junk.com
>>>Skype: JeffLiebermann AE6KS 831-336-2558
>>
>>
>> I asked the same question some time ago, but nobody seems to know.
>> Does Kismet really detects clients ?!
>>
>>

> http://www.kismetwireless.net/documentation.shtml

> The clients window has a similar selection of columns which can be enabled:
> crypt Number of encrypted data packets transfered by client
> data Number of data packets transfered by client
> decay Displays '!', '.', or ' ' based on network activity
> ip Last seen IP used by client
> mac MAC address of client
> manuf Manufacturer of client (if known)
> maxrate Maximum rate client seen transfering
> noise Last seen noise level of client
> signal Last seen signal level of client
> size Amount of data transferred by client
> type Type of client (Established, To-DS, From-DS, etc)
> weak Number of packets which appear to have weak IVs


http://pages.ripco.net/~a2k/snapshot1.jpg < screenshot of the interface

NETGEAR is one client and the oddly named ones below it are part of a
city wide network. the data networks are cisco access points that pester
any and all cisco clients within range,and all the rest are AP's



> Rob

I have Wififofum running on my iPAQ and it can detect peers (clients).

2004TL.NBP wrote:
> I have Wififofum running on my iPAQ and it can detect peers (clients).
>
I think you will find that they are ad-hoc(peer to peer) networks.

Rob

--
http://www.childhooddiseases.org/
http://www.grid.org/projects/cancer/

AirSnare


Bert Hyman wrote:
> I can fire up an app like NetStumbler and see all the APs within
> range.
>
> Is there something similar which detects clients?

On Mon, 5 Dec 2005 23:21:15 +0100, "Steffo" <(E-Mail Removed)> wrote:

>AirSnare

How will AirSnare detect wireless clients that do *NOT* connect to the
access point where the only data it can obtain is sniffing the
ethernet LAN port traffic? Sure, it will detect connection attempts
but not every client is setup to connect to every access point it
hears.
http://home.comcast.net/~jay.deboer/airsnare/
Airsnare is a nifty program for intrusion detection, but it's not
useful for this.


>Bert Hyman wrote:
>> I can fire up an app like NetStumbler and see all the APs within
>> range.
>>
>> Is there something similar which detects clients?
>
--
Jeff Liebermann 150 Felker St #D Santa Cruz CA 95060
831.336.2558 voice
http://www.LearnByDestroying.com AE6KS
http://802.11junk.com Skype: JeffLiebermann
(E-Mail Removed) (E-Mail Removed)