RE: Tutorial on Wireless packet sniffing



Wouldn't it be a good idea to at least run a whois against the domain before
accepting the legitimacy of it?

Maybe that is the real story here - it was weird enough for you to comment
on its weirdness, but not to question its authenticity.

Dan



-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx]
On Behalf Of Michael Painter
Sent: Sunday, April 20, 2008 4:29 PM
To: security-basics@xxxxxxxxxxxxxxxxx; pen-test@xxxxxxxxxxxxxxxxx
Cc: Fred Goldstein
Subject: Tutorial on Wireless packet sniffing

From the "Set your watch back 24 years" department:

PUBLISHED BY
NEIGHBORHOOD NETWORK WATCH
DEPARTMENT OF HOMELAND SECURITY
WASHINGTON, DC 20528

How To Sniff Network Traffic
Neighborhood Network Watch Home Network Awareness Program

[snip]
Finding a Network
We recommend to start with your own home network and then eventually move
onto those of your neighbors. Eventually you could begin looking at
networks that are
local to your community, such as cafés, local eateries, libraries, and
parks.
There are many ways you can find a network to monitor if you do not have
one of
your own or if your ready to move onto monitoring networks other than your
own. On
the next four pages are four ways and places to find wireless networks
that maybe
suitable.
[snip]
The Command
The command in figure 1 will be the full command that you will be typing
into your
command line to run TCPDUMP to capture all network traffic from the
network to a file.
TCPDUMP will collect network traffic that is coming from the following
types of
applications: email clients, instant message clients, instant relay chat
clients (IRC), file
transfer protocol clients (FTP), and web browsers.

http://www.dhsnnw.org/HNAPDocs/NNW-HNAP-
How%20To%20Sniff%20Wireless%20Traffic.pdf

Interesting screenshot about halfway down of what's on the PowerBook.

I need to see a Chiropractor.
I've been shaking my head side-to-side so much lately my cervical
vertebrae need some help.

--Michael


------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------



Relevant Pages

  • Re: IP address assignment problem
    ... I have a little problem and seek for ur thoughts, let's assume I'm in a very open environment where everyone can very easily try to get his/her laptop on the network and IP addresses are assigned by a DHCP server and we are in a domain environment, how do I prevent machines that are not part of our domain to be assigned an IP address? ... This approach doesn't stop your rogue clients from connecting to other clients, but merely doesn't give them the information they normally need to do so. ... Using 802.1x, your workstations authenticate through the switch to a radius server before they are allowed any connectivity. ... This authentication can use X.509 certificates, computer account credentials from AD, or whatever else you'd normally configure radius to authenticate with. ...
    (Focus-Microsoft)
  • RE: Dropped Client Connections
    ... I understand that the SBS clients will lose ... Do all clients lose network connection at same time? ... Do you have single or double NICs on SBS? ... Modify the registry to disable Receive Side Scaling ...
    (microsoft.public.windows.server.sbs)
  • Multiple Consistent Security Event Logs
    ... to capture Audits for both the Clients n the Servers. ... enabled certain other policies relating to secure Network Communication. ... Object Access, Logon/Logoff, Account Logon, Privilege Use with 'User' varying ...
    (microsoft.public.win2000.security)
  • Re: Please help me "sell" the idea of a more secure network
    ... changes first should bring the network up a notch or two. ... Do the same thing using a wireless notebook from you company. ... show him a PO or invoice for a customer who had an AV ... products, releases, life cycles, etc, all on the individual clients. ...
    (microsoft.public.win2000.active_directory)
  • Re: Please help me "sell" the idea of a more secure network
    ... changes first should bring the network up a notch or two. ... Do the same thing using a wireless notebook from you company. ... show him a PO or invoice for a customer who had an AV ... products, releases, life cycles, etc, all on the individual clients. ...
    (microsoft.public.win2000.active_directory)