Warning

 

Close
Confirm Action

Are you sure you wish to do this?

Cancel Confirm
AR15.COM
5/14/2008 6:42:32 AM EDT
At any given time I'm running two laptops on my wireless network.  My network is about as secure as a layman can make it.  WPA2 encryption, MAC Address, router firewall and software firewall on each box.  

I'm wondering if there is a way to identify if someone is stealing the wireless signal or trying to hack into the network?  Maybe some sort of monitoring software or something like that.

I don't believe that anyone is trying to defeat my security.  There are five networks within range of my laptop.  Three are WEP, two are completely unsecured.  With the two open networks around, I'm pretty safe.

I'd like to know how the security guru's identify attempts to break into a wireless network.

Thanks

ZM
5/14/2008 1:30:09 PM EDT
[#1]
You'll be able to detect an active connection or attempt to connect by looking at the logs on your WAP.  

Passive monitoring/sniffing, however...nope.  No way of telling.
5/16/2008 6:16:48 AM EDT
[#2]
you could look into a WIDS from companies like AirDefense or AirMagnet,

i know there is an open source project for wireless extensions for SNORT (IDS/IPS) that operates at below the IP level, so it would look for MAC address spoofing and such... i haven't played around with it too much...

SNORT and SNORT-Wireless are free.

ETA: you might also want to look into kismet, it's a wireless network sniffer