AirSnare....*free* Wi-Fi monitor for your wireless network!!

[krag]

I was flipping through the channels and was watching TechTV for a few minuites (usually Leo says something stoopid & then I turn it) but they were showing off this sweet little free program that lets you monitor your Wi-Fi network to see who is using it and you can see what they are downloading. I jus installed it and its really nice I am running it right now. at first I got all kinds of alarms...because it picked up my wireless base station MAC and my NIC MAC address and thought they were intruders. I fixed it by editing the "friendly MAC" file with my MACs.



Come and get it boys! (http://home.comcast.net/~jay.deboer/airsnare/)

I havent' found out how to view what the "intruders" are downloading yet. Maybe if one of you finds it before me you can post it here?

[Smokeys]

Neat utility...

[SniperXX]

Cool, Im gonna get it.

[macklin01]

Hmm, thanks for the post. I haven't had a chance to try it yet, but it looks promising. AirSnort and NetStumbler are some other commonly used programs for testing out your security.

I do like the "air horn" utility.

-- Paul

[Fronic]

Is it possible to monitor from a wired computer?

[macklin01]

I tried it from my wired computer, and it seemed to work.

Overall, I thought it was a good program, but I noticed a few hiccups.

As far as I can tell, it misdetects some legitimate activity by the router and / or cable modem as hostile. Not sure on that yet, but I know I could get it to happen every time I reset the router / firewall settings. I also got it intermittently at night sometimes, which I believe might be due to the cable modem and ISP renegotiating / renewing the IP address.

Not sure on all that, though. It does show as a DHCP request, and it corresponds to times when a DHCP request shows up in my router / firewall logs, and I have my DHCP server turned off, and so the only DHCP activity should be between the modem and router / firewall and between the modem / ISP.

(Any help in a greater understanding would of course be appreciated. :) )

-- Paul

[krag]

Originally posted by macklin01
I tried it from my wired computer, and it seemed to work.

Overall, I thought it was a good program, but I noticed a few hiccups.

As far as I can tell, it misdetects some legitimate activity by the router and / or cable modem as hostile. Not sure on that yet, but I know I could get it to happen every time I reset the router / firewall settings. I also got it intermittently at night sometimes, which I believe might be due to the cable modem and ISP renegotiating / renewing the IP address.

Not sure on all that, though. It does show as a DHCP request, and it corresponds to times when a DHCP request shows up in my router / firewall logs, and I have my DHCP server turned off, and so the only DHCP activity should be between the modem and router / firewall and between the modem / ISP.

(Any help in a greater understanding would of course be appreciated. :) )

-- Paul

Yeah, I had the same problem. But I went back to the web site and read the how to setup (http://home.comcast.net/~jay.deboer/airsnare/setup.htm) link. ;)

Basicaly you go to >windows explorer>C:/>program files>Airsnare>trustedMAC....this trustedMAC file is a "txt file" that you can edit. You delete all of the ones that are already on there (there were 4 on mine) and then type in your MAC addresses. I had 2, one for my Wireless Base Station and one for my NIC card (computer). Click save and your MAC's are now recognized as "friendly MACs". I also noticed that it picked up my DCHP automatic renewal as well. I haven't done anything with that yet but I did notice a selection to "dump unfriendly MAC list to Auto_trustedMAC.txt" under the "File" category in the program browser bar. Which i am sure will do the same thing with out you having to *edit* the TrustedMAC.txt file manually

[macklin01]

Thanks for the response.

Well, I did add all the NIC cards and the firewall / router to the trusted MAC list. (Was one of the first things I did. ;) ) I'll have to do some more digging around on my own later. ;)

-- Paul

[perinator]

I downloaded it and tried to run it and it told me that it had to reinstall som dll's so i uninstalled it and tried to reinstall and same thing happened.

[macklin01]

Ah, I know what's up there:

" You must have the WinPcap Library installed. If you are running Ethereal (the free sniffer software) then you already have this, if not you can download it from http://winpcap.polito.it/. "

See this page:

http://home.comcast.net/~jay.deboer/airsnare/setup.htm

-- Paul