LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 05-24-2007, 02:13 PM   #1
darin722
LQ Newbie
 
Registered: Oct 2006
Location: seattle
Distribution: ubuntu, fedora, knoppix,backtrack, others
Posts: 23

Rep: Reputation: 15
can driftnet 'see' the other side of a wireless router?


I have a wireless router attacted to a clearwire modem. My desktop plugs into one of the hardwired ports, and I (rarely) use the wifi to connect with my laptop in another room. I recently had someone attached to my network who wasn't supposed to be (I enabled none of the security options while doing some troubleshooting) Just for fun, I broke out a copy of backtrace and tried to monitor the sites this vampire user was surfing using driftnet. I ran driftnet from my desktop and it could not 'see' any of the activity on the wireless connections. Is there a way that these security tools can be used to monitor wireless connections to my network? I have enabled security which prevents the connections, but I think I know who is using my network and why (he has his own internet connection) and I'd like to point out to him that pirating my connections isn't a good idea.
 
Old 05-24-2007, 02:33 PM   #2
jschiwal
LQ Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682
The router probably works like a switch rather than a hub. I'm not familiar with driftnet. Your router may be able to log outgoing and incoming connections. This would give you a table of IP addresses.
 
Old 05-24-2007, 11:39 PM   #3
darin722
LQ Newbie
 
Registered: Oct 2006
Location: seattle
Distribution: ubuntu, fedora, knoppix,backtrack, others
Posts: 23

Original Poster
Rep: Reputation: 15
driftnet and router

I figured that the router was passing wireless requests along to the modem without putting them on the cable so eth0 could see them, so I went out and bought a hub. I connected the hub to the modem, router, and desktop hoping that that would put all access to the modem where the desktop's nic could see them. It didn't work. I still can't see the wireless requests. Did notice something odd though. when I started driftnet on the desktop it will see what the desktop is doing. With the -v (verbose) switch set there is activity when the desktop surfs, but not when my wireless laptop surfs. I started wireshark and driftnet started registering <something> when the laptop was surfing. with the desktop I'd get ip address info, and the names of jpeg images. Surfing with the laptop I'd just get the addresses and dots (.......) while images were being displayed.

at the moment these difficulties appear to apply to wireshark too. I can't see any activity with wireshark when I"m surfing with the laptop.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Can my Linux box be used as a transparent proxy on the LAN side of my router? Steve2001 Linux - Networking 5 02-01-2005 11:12 AM
static IP, a router, getting apache working ok Lan-side flippantfig Linux - Networking 2 06-04-2004 12:02 PM
Driftnet JockVSJock Linux - Wireless Networking 0 05-23-2004 12:26 PM
IP-less sniffing on WAN side of internet router codeape Linux - Networking 18 02-17-2004 02:18 PM
Trying to install Driftnet needamiracle Linux - Software 0 07-25-2003 10:00 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 05:18 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration