Related
Hi, thanks in advance for help.
I have someone leeching off my Wifi net, who seems to be able to 'break-in' no matter how i secure the WiFi net.
Anyone know of any free Windows Mobile software that will show signal strength of Wifi CLIENTS nearby. Not Access Points, but CLIENTs.
I want to go find this guy.
thanks
Hi there!
If you got an "leecher" on your network I would recommend you to start your search on your router.
You didn't provide any specs, how did you find out that someone is on your network?
Next question, have you changed both, router pass and wlan key?
Are u using weak encryption (wep)?
Whats about your mac-filter?active?
I would guess you've got an dhcp server on your network/router... go there and check the dhcp releases. Any suspicious entrys? You should know all the devices listed there. If you have found a IP you don't know, ping it and check if its alive (those packages can be ignored by the host), try to access it via smb, you could also try a demo of languard and try to read out details like os, user, owner...
I'm almost shure you can't use your wm device to locate a client of a network, unless you can switch your wlancard to ap-mode and he connects to you ^^
Nope, need signal strenght reader if poss.
Thanks for the comment, but I'm pretty security savvy, and have done most of what you recommend.
I actually can't believe he's still getting in when I've locked down so tight.
Anyway, it's a CLIENT signal strengh program that I'm trying to find.
Rogue clients are malicious wireless client devices that either try to gain illegitimate access to your WLAN or try to disrupt normal wireless service by launching attacks. There are numerous ready-to-launch wireless attack tools freely available on the net. Many of them are open sourced and work pretty well with most Wireless client cards. This turns any curious mind to professional hacker in minutes. Many do it simply for the pleasure of being able to disturb someone remotely. All these developments force WLAN administrators to give a second look at any wireless client that is misbehaving.
What means most of that what i recommended?
Did you actually change the router password AND the wlan key?
Sorry, I don't think that you can trace him with your mobile. as long as hes not connected to your mobilephones wireless network (wich requires your mobile wlan device to switch to ap-mode).
Forget about that.
Please tell us, why do you think somebody is on your network, how did you find out... whats the "evidence" for you that there is somebody.
I'd like to help u, but i need some further details to lock him out.
I hope you know that its just a matter of minutes to break a wep key. GPUs are used to decode it, which is damn fast!
So please provide more specs about your network.
Greetings
1: Use WPA instead of WEP.
WEP is crackable in a matter of seconds.
2: Assign access control/MAC filtering
3: Use your network in ad-hoc mode
Well, WPA is crackable too.
The person in question might change his MAC to yours and create collisions anyways
Can you be sure that he has really associated with your router. I have noticed some client/router combinations "apparently" associate but all traffic is blocked because they did not provide the right key.
As others say - use WPA WPA2 and use a strong (non dictionary) passphrase
get a computer that can run airodump or something similar.
run airodump with it set to the channel of you router - not in hopping mode as you will miss lots of packets.
Airodump will tell you the strength of the signal from his computer so if you have this on a laptop you can move around and possibly can an idea roughly where he is
Thank you, i will try Airodump
Thanks in particular Scote.
I didn't list the router config simply becuase I am confident it's pretty secure:
Router is a new Belkin N1
- 63 random char password from grc.com/passwords
- SSID is "netgear" even though its a Belkin : intention to mislead for access URL.
- WPA2-PSK AES encryption
- SSID not broadcasting
I didn't bother with MAC filtering, as I understand a good 'hacker' can spoof it : If this guy can get through WPA2 I would say he can probably MAC spoof.
My 'evidence', is that up to 3 unkown computers turn up on the 'Clients List', around 4 hours after I change the SSID/password : Each time.
I have 2 laptops, so I will try Airodump or maybe Backtrack (suggested elswhere) on these as a 'direction finder' based on signal strength.
Hmmm...I did read somewhere you can set a Kaiser to be an access point...
Thanks all
Yes you can.
Someone found his stolen Wii/mobile phone (don't remember which one) that way.
There was even an article on the net.
I know that this thread will probably be over in approximately 3 posts, but I figured this was the place to ask to get a good answer.
I am part of staff for a site that uses my IP to enable staff functions. These functions are set to the IP I'm on. However, it never works considering my IP constantly changes when I'm on the T-Mobile network, and I do not have access to wifi. Is there any possible way at all, to be able to make this work, either from my N1, or on my PC using my N1 as a 3G hotspot? I'm not all that knowledgeable about networking, but I'm thinking there has to be some possible way to make this work somehow. Maybe I'm wrong and it is one of the impossible things to do on a cell network.
Thanks for any help.
how often does it change ? is the running at home or the pc u are tethering with it ? are you using a 3g network service for a server
Every couple minutes at least. One minute it's for example, something like 208.54.27.50 and in a matter of 5 minutes the last two digits could be changed. I use the 3G hotspot at home and there's no difference from that and using the phone's browser itself. I do not use T-Mobile 3G to operate any servers.
If it is via your provider you have no control over it changing as they assign you a dynamic IP. If you were at home you could set it to a static local IP (Over WiFi) but outside your LAN on T-Mobile's WAN you have no control over DHCP
All I use for internet access on the go and at home is the 3G hotspot that I get from my phone. Would I need an actual Wifi connection from an ISP other than T-Mobile to set it to a static local IP?
looks like that just cant be done.. either ur site changes ur auth to id pw based one(atleast in ur case)
or ..
if its a job of just checking somthing, u can find a friend or family member with a 24/7 online pc(with a a static ip) and just do the job thru a remote desktop connection
All right guys. Thanks. Very much appreciate your thoughts and for not flaming me due to an obvious answer. Thank you again.
I live very close to a hotel which has multiple SSID's that keep interfering with my ability to stay connected to my router.
I've tried hard coding a static ip on the phone, adding the mac address to router, even went as far as creating a separate unhidden network just for the phone. So far, nothing has worked.
So i was thinking that maybe there's a way to have the phone ignore certain signals, lock on to a preferred one or use WiFi but turn off the scanning feature. The only problem is that I haven't been able to find any settings or Apps that will allow me to do it.
So, if anyone has any ideas or suggestions as how, or if, I can make this work, I would greatly appreciate it.
I'm using a Droid 2 Rooted with 2.3.3 and have a Netgear N750 router.
BTW - none of the computers in the house are having this issue.
Sent from my DROID2 using XDA App
So, are you saying the phone constantly tries to leave your home wifi in favor of attempting to connect to the hotel's?
Yes, unless I'm within about 5 feet of my router, the hotel's signal makes the phone keep dropping and reconnecting over and over again.
Sent from my DROID2 using XDA App
Are the hotel's hotspots not WEP secured? That is so odd. If they're unsecured hotspots go over to the hotel and tell them to get their sh*t in order. Otherwise I'm out of ideas, sorry.
No, they are secure. WPA2 as is mine. I don't connect to them. My phone just detects them, drops my connection and tries to connect to them. So that leaves me with no connection and having to use 3G.
But there may be an easier solution to this. After spending a few hours on the Netgear site, it turns out that there is a bug in their firmware that causes signal strength fluctuations. They said a new release should be available in a few weeks.
In the meantime I've changed the channel on the router to auto select which seems to be helping.
I do appreciate you taking the time to assist.
Thanks!
Scott
Sent from my DROID2 using XDA App
Glad there's at least some kind of work around, wish I was of more assistance.
Having a similar problem with a samsung galaxy sii - current internet configuration is through AT&T U-Verse with built in Wireless G router in there Gateway. tried adding a Netgear dual band N router to my network and with the netgear's 2 wifi signals on then my phone just constantly goes into scanning mode and keeps trying to connect between the 3 - things work fine with the wifi turned off in the new netgear kind of defeating the purpose of me installing it - was hoping to have the phone use one of the N signals..
Block bt openzone connection pleaseee!
Desperately need an app for this? Is it not going to be possible for a way to block certain wifi signals because I'm actually going to rip next doors BT openzone router out of the wall and get a hammer to it! My HTC desire hd is insistent on connecting to its poor signal over our excellent one and the worst part is that you can't actually access the network unless you pay BT for a user account! Grrrr.... Please help
Try to connect the network you dont want, then go to wifi management in settings. Long press on the network you dont want and hit forget network. Then your phone shouldnt automatically connect to it unless you tell it to.
This is driving me insane!
When I have WiFi enabled at the office, my Samsung Galaxy Note (stock ICS, rooted) constantly receives incoming data and I haven't got a clue which setting, app or service is causing this.
SystemPanel registers a nonstop stream of incoming traffic at 8 to 10 Kbps.
TrafficStats shows an accumulation of Received data under Total WiFi, but can't seem to link it a particular app or service: after resetting the data, no processes appear but the incoming data keeps on growing.
All sync options are off, I've tried to kill every running app or service (one by one, all at once), I've tried to block all traffic using Droidwall. As soon as WiFi is enabled, the incoming stream is unstoppable. When switching to 3G, there's no incoming traffic.
But to make matters even more mysterious, I do not have this problem with my WiFi connection at home.
It only occurs at the office, only on WiFi and (as far as I know) only on my phone.
Any ideas?
This is simply because your wifi antenna still "hears" the data going trough the wireless network on wich you are connecter. Event if your phone doesn't asks for any data at the moment the traffic there is on the network will still be counted by the wifi chip on your phone.
It will be the same on any public network or if you have another phone or a computer connecter on the same wireless router and generating traffic.
Thanks for replying, John!
That sounds very plausible, but then I still have to figure out why only my phone is registering this traffic - maybe it's an ICS thing or brand specific?
And I'll try to 'reproduce' it at home by connecting a laptop at the same time.
I think that the above is correct. That may be default behavior.
Sent from my XT862 using xda app-developers app
Well, I've tried to connect several devices at once on my home WiFi network, but it did not reproduce the incoming traffic problem I experience at work.
There were a few incoming bytes registered, not nearly as much as the constant stream of 10 Kbps at the office network...
Your works wifi may be set up like that. Who Knows?
Sent from my XT862 using xda app-developers app
MrObvious said:
Your works wifi may be set up like that. Who Knows?
Click to expand...
Click to collapse
Well, our it-department certainly does not.
You're probably right that this is normal behavior. I'll just have to figure out which drains less battery under these circumstances, WiFi or 3G. Thanks anyway for replying.
I'm on the mobile app, but if you have GSM then just switch to 2g until you use it.
Sent from my xt862 using xda app-developers app
Djezpur said:
Well, I've tried to connect several devices at once on my home WiFi network, but it did not reproduce the incoming traffic problem I experience at work.
There were a few incoming bytes registered, not nearly as much as the constant stream of 10 Kbps at the office network...
Click to expand...
Click to collapse
About this, it is simply that at your office there is traffic on the network (download/upload) while at home simply having devices connected doesn't generate traffic or almost none. Start several dl on several devices (phone laptop) (guess 2-3 is enough, maybe even one but not sure, not en expert after all ) then you should notice signifficant traffic on your phone, I guess!
So interesting I find this thread because I have the exact same problem!!!!
How I noticed it...when I am at home I drop 1% battery on Wifi per hour. 10hours = 10% (sometimes less).
I go to work on the Wifi, I DONT USE ANYTHING ON THE PHONE and the battery is DRAINING LIKE CRAZY!!! 5%/h or more!!!
( I am in airplane mode in both place)
So I was thinking, WTF with this work wifi, i am not doing anything at all on it. Then I look at my wifi icon I have a constant RECEIVE icon. And I bet my phone does not go to sleep or something.
So why in the world my work wifi is draining my battery and the one at home is not. I will check tonight but I dont think I have traffic like this. I am registering 5-6kbytes/s for nothing. The explanation given above is hands-waving. I do not agree with it fully. YEs sure there are several pings and beacon emitted back and forth but i do not think it is enough to cause 5-6kbytes/sec . The wifi is not in Monitor mode and it only receives the packets destined to my phone.
This is madness!!!! BTW When I had a different kernel on back on ICS this behavior stopped. I will try to monitor again.
kalinusa said:
So interesting I find this thread because I have the exact same problem!!!!
(...)
This is madness!!!! BTW When I had a different kernel on back on ICS this behavior stopped. I will try to monitor again.
Click to expand...
Click to collapse
Hey kalinusa, did you find a solution to this problem?
I'm currently on the SpeedMod kernel, but that does not seem to make a difference to the 'office WiFi behavior' (so I keep my phone on mobile data).
I don't want to speak out of my ass, because I haven't a clue how the app works.
As far as I can guess SSH tunnel may help you. I would hope someone else could tell me I'm right, but I'm probably wrong.
I have had this same problem with two of my devices. The first is a Samsung Captivate with the last AOKP ICS build. The second is a Google Nexus 7 with AOKP's first Jelly Bean build (it happened when I had stock as well).
This only happens when I'm connected to WiFi at my university. The down arrow on the WiFi icon is ALWAYS on and it drains the battery. At home, I don't have these problems.
I emailed my university's IT department but I'm not sure if there's anything they can do. Anyone have any suggestions? Thanks.
I have exactly the same problem, but I think I found the reason which is causing it. I think that some of the routers are capable of the multicast over the wifi and then we can get a constant wifi traffic. I tested it at home, where I have enabled multicast over wifi and my phone wifi receiving the data all the time, even if it is in sleep. Now I'm in the office where we do not have such capable router with multicast over wifi and my phone wifi behavior is as expected. When I will be at home I will test it again with my router and with disabled multicast over wifi and hopefully it will solve this issue.
danielo said:
I have exactly the same problem, but I think I found the reason which is causing it. I think that some of the routers are capable of the multicast over the wifi and then we can get a constant wifi traffic. I tested it at home, where I have enabled multicast over wifi and my phone wifi receiving the data all the time, even if it is in sleep. Now I'm in the office where we do not have such capable router with multicast over wifi and my phone wifi behavior is as expected. When I will be at home I will test it again with my router and with disabled multicast over wifi and hopefully it will solve this issue.
Click to expand...
Click to collapse
More than multicasts it could be broadcasts, what are you reaceiving. For example if you don't use WINS server in Windows domain, all computers use broadcast to get IP address for a computer name (if you dont use DNS name, but that's another story). At home, where aren't many computers, there are very few broadcasts. But somewhere, where a large amount of computers is on the same network (not splitted to broadcast domais), number of broadcasts would dramatically increase
btw. if you connect a PC to the same network as your phone and stop ALL running applications (mainly instant messangers, web browsers, e-mail clients) you should see the same network bandwidth in use as on your cell phone.
More than multicasts it could be broadcasts, what are you reaceiving. For example if you don't use WINS server in Windows domain, all computers use broadcast to get IP address for a computer name (if you dont use DNS name, but that's another story). At home, where aren't many computers, there are very few broadcasts. But somewhere, where a large amount of computers is on the same network (not splitted to broadcast domais), number of broadcasts would dramatically increase
Click to expand...
Click to collapse
Interesting. Roughly how many devices would need to be on the same network, to see that kind of traffic load?
-- Sent from my TouchPad using Communities
post-mortem said:
Interesting. Roughly how many devices would need to be on the same network, to see that kind of traffic load?
-- Sent from my TouchPad using Communities
Click to expand...
Click to collapse
It depends on what you consier as network load. If you start a network monitor like Wireshark or MS Network monitor and even if there is one computer on the network, you wil see "some" traffic (from time to time a few network packets). To generate constant network load, you'll need a few dozens of computers. And it always depends on how the network is designed and what applications the computers run. If all computers connect to a server, the network load will be a lot lower than if the computers share resources among them.
Or you can design your network in such way, that you divide computers into segments, where computers can communicate only with computers in its segment (or with some distant servers). This way the network load will dramatically decrease, as computers from different segments would not interfere.
I currently only have one computer connected to my home network atm via wifi, and it keeps a constant broadcast going to my phone for some unknown reason. I thought it was my dlna server, so I shut that off, and it is still broadcasting _something_... Its causing quite a battery drain, and unfortunately I cant seem to find the root of the issue. I've trolled through my router settings -- multicasting isnt on -- so Im at a loss. =\
Spz0 said:
I currently only have one computer connected to my home network atm via wifi, and it keeps a constant broadcast going to my phone for some unknown reason. I thought it was my dlna server, so I shut that off, and it is still broadcasting _something_... Its causing quite a battery drain, and unfortunately I cant seem to find the root of the issue. I've trolled through my router settings -- multicasting isnt on -- so Im at a loss. =\
Click to expand...
Click to collapse
It can be caused also with the Media servers which runs on PC, also DHCP etc. It is not easy to eliminate all broadcast traffic and sadly our phones react at all that multicast packets.
I have built a quadrocopter with all avoinics controlled by an android app. The app streams 50 commands per sec to the four motors with the power. The gyros, accelerometers and magnetometers is read by the app, fed though some mathematics and three PID regulators to balance the machine. The garbage collector makes it jump alittle from time to time, but it works!
Now to my problem. I want the phone to act as a wifi access point presenting itself with a web page with all details for connecting to it. The manual control is through an app running on my current Nexus 5 connecting to the nexus s ap.
With the factory reset nexus s, I can start the portable hotspot, and conect to the phone from anywhere. But I cant connect to any server running on it.
I assume that the phone have ip filtering rules that forward all incoming packages to the 3G interface to be delivered to the internet through the telecom net.
I have rooted the phone and installed droidwall and I can run the iptables command.
I have installed a simple web server that I can reach at 192.168.0.3:8080 when the phone is conected to my home ap.
But when the hotspot is running the web server says it can be reached at 0.0.0.0:8080 and android settings/my phone says the ip no is undefined
So I need some advice on how to tweak android to let packets to its portable ap reach my web server. The phone needs an ip no, and some iptable rules probably.