Database Users

Sniffing bluetooth traffic

I want to search around me for ppl with bluetooth phones or PDA's. Is there any good program for that? It should work with pocket pc 2003.
Have a nive day.

Let's see:
1) First post
2) Looking for sniffer software to detect people using bluetooth around you.
I'm thinking you're in the wrong place unless you can come up with a good reason to want to do this.
db

blutooth sniffing / packet insertion / snarfing.
Bluesnarf will compile and run if used with the litmus toolkit..

bluesnarf
cool, but where do u get the prog from?

mate,
try this out; app is called "meeting point". i copied and pasted the details from the web; as seen below:
===================================
Description:
This application is designed to search for -and to communicate with- other instances of itself running on other devices using Bluetooth.
When two or more MeetingPoints are within Bluetooth working distance, they will automatically exchange messages.
Meeting somebody for the first time and worried if you could identify the right person?
Need to meet a client on airport, bar, or another crowded place?
Just "tune" the same channel and it will fire an audible alarm when both meeting parties are close enough.
Do you want to exchange messages with anybody on working range? Just select the PUBLIC broadcast channel.
MeetingPoint works on many Operating Systems / platforms, such as PalmOS, Windows Mobile 2003, Windows 9x/NT/2000/XP and smartphones Symbian Series 60.
Every time a Bluetooth device is found, MeetingPoint communicates with it and attempts to perform a handshake. If the contacted device is also running MeetingPoint, and is "tuned" in the same channel, they will exchange messages and its users will hear an alarm notifying of the arrival of a new message.
MeetingPoint uses Bricenter's FDE (Fast Discovery Engine). FDE algorithm is based on statistical probabilities, and works well in the real world.
In a real situation, devices launch MeetingPoint at a random time and far away from the actual meeting place. When they enter the "meeting zone", their Bluetooth states are "shuffled" enough and, according to statistical probabilities, the "contact time" should be minimal. This is a critical feature designed specially for cases were people are moving.
MeetingPoint will redefine "bluetoothing" to a new level.
===================
cheers
robson

bluesnarf
ok thats cool, but what about the forced entry abilities that 'snarf claims to have? i think the only way to protect myself from it is to understand how it works.
Smiley

Re: bluesnarf
smiley_thing69 said:
i think the only way to protect myself from it is to understand how it works.
Click to expand...
Click to collapse
How about turning off Bluetooth?! :lol:
No, seriously..
I don't consider bluesnarfing and bluejacking such a big deal, but it would be fun to try it..
Lemme know it you find "bluesnarf1.0_ARM.cab" or something..

Engineering mode

I have been playing with my tmobile MDA (wizard) and in HKLM/software/HTC/engineermode there are some keys I find interesting. On mine LaunchEngineerModeAppDialStr is set to *#*#364#*#* (364 maps to 'eng' which is probably why it was chosen).
Has anyone played with this at all? I tried but I get 0 mobile srevice her eand got a message back saying 'please try you call later' (sms style) which I am certain came from the phonei tself. Normally I get just 'failed' rather than 'please try your call later'.
At any rate, it might be something fun to look at I know that some people were looking to get the tower IDs and other info, and usually engineering mode includes that.

update
I have an update to this. I have 2 SIMs both tmobile US. The old one is at least a year old, maybe more. It is totally inactive. The new one came with the phone. When I use the old one I get 'please try your cal llater' with the new one it goes into engineering mode and displays cellid and other bits of info. of course its not highly useful for me right now becuase I have no cell signal, but ...
The title bar reads 'gsm test mode' and there are 3 tabs. GSM, AMR and GPRS. At least now the key to get the dial string is known, if it wasnt before (I didnt see anything) and the fact that you can get tower IDs and other stuff (something someone wanted elsewhere).
the gsm test mode app appears to be a totoally different app as well (according to start->system->memory->running programs. I do not have good tools yet to see exactly where this app is and how to access it. But I am sure that if that program were located a debugger could provide useful info on extracting the syscalls or whatever is done to get access to the cellid and other bits of info.
Note cellids can be used to track location, they are fixed and reported, at least in the US., While you may not know exactly where someone is, by knowing which tower they are on you can guess. RSSI can be used in conjunction with this as the far field (where most radio communications occur) falls off at the inverse square, you can guess at the distance (but not direction). Multipath and other issues can affect this reading, so its not highly accurate but ...
Now does anyone know of a good tool like ps in unix that shows me not only the full program name but also any arguments given for WM5?

GSM Test Mode..
An easier way is to look in your \windows dorectory and look for the "GXM Test Mode.exe" ....

Getting into a wireless network without the WEP key

My friend was boasting about how secure his network is and how nobody could ever hack into it. I am able to pick it up on my Universal, but it asks me for the WEP code. It would be very funny if I could use his connection after all his boasting :twisted: ! So, is there any app that can do this - perhaps by guessing all possible combinations until it gains access, or any other way?
Thanks

WEP is an older security method that has been proven to be hackable and especially true if the 64-bit version is being used.
There are tools around to hack WEP security, but I doubt it is for PPC. Even for PC, it requires some drivers for the wireless card, and a lot of the wireless card are not supported, including Centrino.
Lets assume that you have the appropriate equipment. Depending on the key size your friend used, e.g. 64 / 128 bits, you are required to be there to capture enough data (approx 500Mb for 128bits, I think) to get enough 'clue' to decode the key being used.
Finally, lets assume you had the key. You boasting friend may have a second layer of protection with wireless MAC address filtering, which filter out un authorized units based on MAC address. Of cource, MAC address can be spoof, but doubt there are any easy method of PPC unit yet.

You need another laptop as well as the PPC.
Download and install: Auditor: http://www.remote-exploit.org/index.php/Main_Page it is basically a boot from CD Linux with just the tools you need to 'probe' networks. use the PPC to find the Mac address, SSID and channel. Then fire up the laptop and start using all the tools to crack the WEP. The more data going over the network, the faster the apps will be able crack the WEP code. If enough data is flowing through the router, it is possbile to crack a 128 bit WEP in 10-20 minutes. If you have two laptops, you can get the other one to talk to the router (with spoofed MAC) to increase the data.
As already mentioned, all this depends if your card is supported by the apps, and can be put in silent mode (if you don't want to draw attention to yourself)
Of course, it is much easier just to walk 50 yards down the street and find an unsecured network for your free Skype calls.
cough.
/Mad

Thanks for the help. How would I find the chennel and MAC address with my universal?! I just want to get into my friends as a joke, and so finding another network wouldnt be much help!!
Thanks

6680abhi said:
Thanks for the help. How would I find the chennel and MAC address with my universal?!
Thanks
Click to expand...
Click to collapse
Mine is german, so my translations may be wrong
From the start menue
-> Settings
-> connections
-> Wireless-LAN
There you'll find the information you are looking for.
Do you have some experience with Linux? It's a bit more complicated than Windows Mobile

AFAIK for Wep cracking there are also a couple of programs for PocketPC existing which can do this within minutes.
but this depends strongly on the WLAN hardware.
Search in google for this.

BlackICE said:
AFAIK for Wep cracking there are also a couple of programs for PocketPC existing which can do this within minutes.
but this depends strongly on the WLAN hardware.
Search in google for this.
Click to expand...
Click to collapse
Thanks for the help. I have serached on google, but am unable to find a wep cracking application for ppc. Could you perhaps give me a link to one?
Thanks

look here:
http://www.google.com/search?num=30...esnum=0&ct=result&cd=1&q=wlan+sniffer&spell=1

Thanks again, but could you please be more specific with an application, and post a link to the application, as I was unable to find anything by clicking on the google search you posted.
Thanks

6680,
it is easyer to use a notebook, preferrably with two Prism2 based network cards, and boot WHAX from a CD.
Let that run for some time and it'll find the WEP key for you.
It took more than 30 hours to get the key for my neighbours WLAN :?

I did not post you more specific links, as I have to look myself through all these links. Actually, some of the Wlan sniffer programms do have also a PocketPC version.
Actually, it is far more easier to use a notebook than a pda. Also I doubt that there is any program around, which is fully supporting the Wlan hardware of the Universal. At least this was the case half year ago.

[Q] What debug and log tools are available?

Hi,
I'm interested to know which debugging/logging tools are available.
I'd like to get more information about the processes at startup, and specially logs of the CPU usage by each application over a period of time.
I've been searching for some time and the only I've found are the old Htc Test applications, but can't get what I want.
Noted that HTC devices have a builtin debug tool (debuglog.dll). Anyone knows how to use it?
Also found the following the following post describing the HTCDiagDriver and the possibility to analyze the device using QUALCOMM eXtensible Diagnostic Monitor.
http://forum.xda-developers.com/showpost.php?p=12624471&postcount=2
Anyone uses it?

Global debuglog can be enabled via DebugTool.exe (available in Htc Test Applications). It depends on debuglog.dll, yeah. Read manual, it works quite well.
Then, if you want to get log for selected app, launch it via IDA.
Also we have CeLog available, I will post needed launchers soon. I can hardly call it useful as we have retail/ship SYS builds. The only useful purpose for us is page faults chart.
EDIT: CeLog attached.

Some of the builds come with the Perfman package. That s.o.b. will really slow down your device, though, and it creates a massive log file, which I could never find the tools to analyze. I think celog does it, though, which is pretty sweet.
The htc debugger works better. You just change one of the debug flags and reset, and the device starts writing the log file. It doesn't slow down the device nearly as much as perfman. I think celog may work on that log file, too. You can royally eff up your device with that tool, though, if you mess with the radio flags. It's pretty cool how it writes to flash memory. Too bad you can't change other things with it like the page pool size.

ultrashot said:
Also we have CeLog available, I will post needed launchers soon. I can hardly call it useful as we have retail/ship SYS builds. The only useful purpose for us is page faults chart.
EDIT: CeLog attached.
Click to expand...
Click to collapse
I have been playing with the tool on my Tornado and observed the following (usage related):
Use it while the device is disconnected from PC. The overhead of repllog.exe (connected to ActiveSync on XP PC) and syncing is just filling your log. For my installation (no further MS Mobile development tools on the PC) kerneltracker.exe does not connect to the device anyway.
Though obvious, the files CeLog*.exe have to run on the device, so copy them to a convenient place there.
The CeLogAttach.exe seems to start the kernel logging and it slows down the device (kind of obvious). There is no way to stop this logging. Something like CeLogDetach would be needed, if it exists, to restore the state before CeLogAttach.exe was run.
The CeLogFlush.exe will flush the existing log but also immediately start the logging again.
The CeLogStopFlush.exe does just what the name tells - it stops the flush to file of the (still ongoing) logging.
After transfering the celog.clg file (from \Release\ directory of the device) it can be opened in kerneltracker.exe. Then you see all the kernelactivities logged and aligned per process/thread on a zoom-able timeline (10ms - 10s) including the labels of the logged primitives. With event filtering you can sort out what you are not interested in. Here you may need advice on what to look after when you want to hunt down a certain device behaviour.
I have checked for page-faults, Virtual Memory related actions (Allocate, Copy, Free) and also Module actions (load, free) to get a clue if and how modules and paging (or better said: the use of the Page-Pool) is correlated. Nothing eye-striking coming up here, but it may just be for the unknowing observer like myself.
@ultrashot: I could not find anything I would call a "page faults chart" - where is that - or what is that?
Looking further: If I change certain device properties (like increase the pagepool or playing with OSB advanced options) I fear that the logged information here is just far too detailed for a useful compare. For that you would have to create identical conditions for the action under scrutiny - something that cannot be done with a disconnected device.
So I have to admit that all objective compare of such tuning and tweaking is far above my head and I just have to join the many that make more or less clever assumptions trusting on their model of actions in their heads. I hope that the better knowing heads continue to spread their wisdom without only telling RTFM or guide with LMGTFY (which can help if the results really point to right places).

tobbbie said:
@ultrashot: I could not find anything I would call a "page faults chart" - where is that - or what is that?
Click to expand...
Click to collapse
Use Event filter->Miscellaneous->Page fault.
I am not too advanced user of this tool. If we had builds with extra celog instrumentation, we could have take much more from this tool. However, there are some articles in the internets about celog, so anyone who wants to be get more info may just try to google it. I don't want

ultrashot said:
Use Event filter->Miscellaneous->Page fault.
Click to expand...
Click to collapse
That is what I did already when telling about the items I cared below. Page faults are however part of generic virtual memory management and they do also apply for any normal loaded executables. As you know I seek for traces of module related paging and the use of the page-pool.
So it will stay with the trial and error and side-by-side compare with two devices having different settings. Not a big thing doing that...

Some interesting articles on MSDN regarding the paging pool (aka "pagepool"):
Kernel Blog article explaining the fundamentals (highly recommended): http://blogs.msdn.com/b/ce_base/archive/2008/01/19/paging-and-the-windows-ce-paging-pool.aspx
Pagepool Variable explained and simple methods to measure impact: http://msdn.microsoft.com/en-us/library/aa451041.aspx
-> this is what kitchentools are patching in the kernel
Then some more backup on virtual memory - just to complete on that:
http://blogs.msdn.com/b/ce_base/archive/2006/10/30/what-is-virtual-memory.aspx
http://blogs.msdn.com/b/hegenderfer/archive/2007/08/31/slaying-the-virtual-memory-monster.aspx
http://blogs.msdn.com/b/hegenderfer...aying-the-virtual-memory-monster-part-ii.aspx
And to get back to the debug tools topic of this thread, linked form the first article an introduction to the Remote Kernel Tracker to explain what you can actually see there (and why you cannot see certain things as we have shipped ROM builds and not profiling builds to deal with): http://blogs.msdn.com/b/sloh/archive/2005/05/17/introduction-to-remote-kernel-tracker.aspx
Great insight if you want to get a glimpse of how Windows CE operates under the hood.

...reading a little deeper in the MSDN articles, Sue Loh mentions there when talking about the paging pool size determination:
The best tool I know is that readlog.exe will print you a page fault report if you turn on the “verbose” and “summary” options. If you get multiple faults on the same pages, your pool may be too small (you may also be unloading and re-loading the same module, ejecting its pages from memory, so look for module load events in the log too). If you don’t get many repeats, your pool may be bigger than you need.
Click to expand...
Click to collapse
To avoid dealing with a full setup of the Mobile Development toolsets, could any one (ultrashot - you have been so helpful - could you??) post that mentioned "readlog" tool? If there is something like "CeLogDetach.exe", please add it too.
BTW: you may notice that the paging pool is a central part of the Windows CE memory management when it comes to running executable code from "memory mapped files" (as Sue Loh calls them). In my understanding these are simply what we know as "modules".
A lot of tweaking strategies go around that when building ROMs with OSBuilder. There are several ways how to avoid or optimize the use of the paging pool for certain or all modules in OSB. I think these options deserve an own thread and I am not sure if the one OSB thread we have should be cluttered with discussing this.

don't have any of those.

[Q] Anyone good with Microsoft Access?

Hi,
I need serious help and i've searched the internet more in the past few days than ever before and I have got nothing, so I thought where else best to turn.
I have a database for my ICT coursework based on booking swimming lessons. I have 4 tables (tblChildren, tblBooking, tblTeacher, tblLesson) My booking table is full of lookups, I think my problem lies here, but i'm not sure how to work around it. The lookups are the child, their teacher and the lesson they're booked into(pictured here).
I have a booking form, that (should) link to this. When I first made the form it was a manual entry form (had to memorise all the information and enter it on the form to match) and it would enter it and save it in the table. To get around the manual entry i used a lookup where childID is and then changed the control sources of all the fields to pick up the information.
Now, as I changed that to a lookup, it is now finding information and not using it to enter information into the table and therefore not creating a bookingID and not allowing me to save it by creating a record in the table.
Booking form pictured here
Copy of the database here.
If anyone can help i'd appreciate this so much as my final coursework deadline is wednesday. Cheers.
[Thought it's worth mentioning that all information is test information and made up]

Erm... this isn't a "help me with my homework" forum. It's not even an Office forum, much less an Access forum. It's a Win8 forum...

maxib123 said:
Hi,
I need serious help and i've searched the internet more in the past few days than ever before and I have got nothing, so I thought where else best to turn.
I have a database for my ICT coursework based on booking swimming lessons. I have 4 tables (tblChildren, tblBooking, tblTeacher, tblLesson) My booking table is full of lookups, I think my problem lies here, but i'm not sure how to work around it. The lookups are the child, their teacher and the lesson they're booked into(pictured here).
I have a booking form, that (should) link to this. When I first made the form it was a manual entry form (had to memorise all the information and enter it on the form to match) and it would enter it and save it in the table. To get around the manual entry i used a lookup where childID is and then changed the control sources of all the fields to pick up the information.
Now, as I changed that to a lookup, it is now finding information and not using it to enter information into the table and therefore not creating a bookingID and not allowing me to save it by creating a record in the table.
Booking form pictured here
Copy of the database here.
If anyone can help i'd appreciate this so much as my final coursework deadline is wednesday. Cheers.
[Thought it's worth mentioning that all information is test information and made up]
Click to expand...
Click to collapse
This forum is for Windows 8 on mobile devices, not Windows applications. Thread closed.