Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here. |
Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
|
|
05-24-2007, 03:13 PM
|
#1
|
LQ Newbie
Registered: Oct 2006
Location: seattle
Distribution: ubuntu, fedora, knoppix,backtrack, others
Posts: 23
Rep:
|
can driftnet 'see' the other side of a wireless router?
I have a wireless router attacted to a clearwire modem. My desktop plugs into one of the hardwired ports, and I (rarely) use the wifi to connect with my laptop in another room. I recently had someone attached to my network who wasn't supposed to be (I enabled none of the security options while doing some troubleshooting) Just for fun, I broke out a copy of backtrace and tried to monitor the sites this vampire user was surfing using driftnet. I ran driftnet from my desktop and it could not 'see' any of the activity on the wireless connections. Is there a way that these security tools can be used to monitor wireless connections to my network? I have enabled security which prevents the connections, but I think I know who is using my network and why (he has his own internet connection) and I'd like to point out to him that pirating my connections isn't a good idea.
|
|
|
05-24-2007, 03:33 PM
|
#2
|
LQ Guru
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733
|
The router probably works like a switch rather than a hub. I'm not familiar with driftnet. Your router may be able to log outgoing and incoming connections. This would give you a table of IP addresses.
|
|
|
05-25-2007, 12:39 AM
|
#3
|
LQ Newbie
Registered: Oct 2006
Location: seattle
Distribution: ubuntu, fedora, knoppix,backtrack, others
Posts: 23
Original Poster
Rep:
|
driftnet and router
I figured that the router was passing wireless requests along to the modem without putting them on the cable so eth0 could see them, so I went out and bought a hub. I connected the hub to the modem, router, and desktop hoping that that would put all access to the modem where the desktop's nic could see them. It didn't work. I still can't see the wireless requests. Did notice something odd though. when I started driftnet on the desktop it will see what the desktop is doing. With the -v (verbose) switch set there is activity when the desktop surfs, but not when my wireless laptop surfs. I started wireshark and driftnet started registering <something> when the laptop was surfing. with the desktop I'd get ip address info, and the names of jpeg images. Surfing with the laptop I'd just get the addresses and dots (.......) while images were being displayed.
at the moment these difficulties appear to apply to wireshark too. I can't see any activity with wireshark when I"m surfing with the laptop.
|
|
|
All times are GMT -5. The time now is 04:20 PM.
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|