1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Monitor Access Point Usage

Discussion in 'Networking (Hardware & Software)' started by JamesonProd, 2007/04/12.

  1. 2007/04/12
    JamesonProd

    JamesonProd Inactive Thread Starter

    Joined:
    2004/04/10
    Messages:
    57
    Likes Received:
    0
    I am looking for a piece of software that will monitor our APs from the stand point of who is connected. I can find lots of programs that monitor alot of aspects but what I am looking for I can't seem to locate. Simply put, I want to know any of the following: number of people connected, user names, mac addresses, etc. Anything that tells me who and/or how many are using our APs.

    Thanks in advance.
     
    JamesonProd,
    #1
  2. 2007/04/13
    ReggieB

    ReggieB Inactive Alumni

    Joined:
    2004/05/12
    Messages:
    2,786
    Likes Received:
    2
    Ethereal will give you a lot of what you want. Easily MAC addresses (which will identify individual systems), IP addresses and the protocols being used.

    Tying that to user names can more of a problem. It depends what they are logging onto and how. You may be able to pick it up from packet content, but you may have to cross reference to the log on server if one is being used.

    Now - where to site the PC running Ethereal. I think I'd site it on the wireless network. That is, I'd find a cheap computer and install a wireless card in it.
     
    ReggieB,
    #2


  3. to hide this advert.

  4. 2007/04/13
    TonyT

    TonyT SuperGeek Staff

    Joined:
    2002/01/18
    Messages:
    9,072
    Likes Received:
    400
    Also, many APs and routers have logging built in that will show all DHCP clients' MAC addresses, IPs & names. This is usually accessable via the router/AP control panel. Some also can forward the logs to a specified lan computer using the SNMP protocol viewable in the manufacturer's or other log viewer app. However, router/APs that have minimal RAM tend to bog down when logging is enabled.
     
    TonyT,
    #3
  5. 2007/04/14
    JamesonProd

    JamesonProd Inactive Thread Starter

    Joined:
    2004/04/10
    Messages:
    57
    Likes Received:
    0
    Thanks guys for the advice.

    ReggieB...I've used Ethereal to track down lots of network problems but I'm not familiar with how I would set it up to see AP usage.

    Can you point me to any info on how to do that?

    Thanks again for your time.
     
    JamesonProd,
    #4
  6. 2007/04/14
    TonyT

    TonyT SuperGeek Staff

    Joined:
    2002/01/18
    Messages:
    9,072
    Likes Received:
    400
    http://www.ethereal.com/faq.html#q10.1
    http://wiki.ethereal.com/CaptureSetup/WLAN
    To capture ALL of the AP traffic using ethereal from a wired computer you would have to setup the lan like this:
    modem (dsl or cable)
    .........|
    ........router w/ switch
    ..........................|
    .........................hub
    ........................|......|
    ......................comp...AP

    The comp running ethereal must be connected to the hub and the AP must also be connected to a hub. If the comp is connected to a switch you won't be able to sniff all of the lan traffic.
     
    Last edited: 2007/04/15
    TonyT,
    #5
  7. 2007/04/15
    JamesonProd

    JamesonProd Inactive Thread Starter

    Joined:
    2004/04/10
    Messages:
    57
    Likes Received:
    0
    Thanks Tony....but this wouldn't work in my situation. We have APs scattered out through the building all connected by way of a switch at some point back to the main wiring closet. It wouldn't be feasible to move a computer between every AP.

    Thanks for the info though. I'm sure it will come in handy at some point!!

    Thanks again for your time.
     
    JamesonProd,
    #6
  8. 2007/04/15
    TonyT

    TonyT SuperGeek Staff

    Joined:
    2002/01/18
    Messages:
    9,072
    Likes Received:
    400
    In your setup you would have to use a wlan sniffer that can grab all the traffic from all the AP in range. This would also require that the sniffer be running on a comp w/ a wifi card, preferably a laptop so you could roam about as necessary.

    Unfortunately, if the laptop is running Windows, your only option would be to use a commercial product that implements it's own custom wifi device driver that is capable of placing the wifi card into rfmon mode (monitor mode) which means the device does not broadcast but only listens.

    The caveat is that wifi cards running under Windows cannot be placed into monitor mode w/out custom drivers. These commercial apps are also pricey.
    http://www.tamos.com/products/commwifi/ has a trial download.

    If the comp runs Linux then you can do what you want using free software such as Kismet http://www.kismetwireless.net , even use Ethereal to grab all the wlan traffic. Most linux wifi device drivers natively support monitor mode.

    You could try out a free Windows app called NetStumbler. It can be used to grab the data you want, depending upon what wifi card the comp has, http://www.netstumbler.com/ , but it is not as accurate as the Linux utils and does not use monitor mode.

    If all your APs eventually "go out" via the same router or switch at the "front" of the network, then you could place a hub inbetween the first 2 lan devices and monitor inbound & outbound traffic at that point. Connect a comp to that hub and use some sort of sniffer or run some sort of software firewall that logs everything. The firewall need not be configured with any rules that contradict other security implementations on the lan, meaning it could be set to allow everything, you only want to use the logging features. This hub would be placed at the appropriate point in your "main wiring closet ". And it MUST be a hub and not a switch because a switch routes traffic to only the destination device whereas a hub routes to all devices connected to it, e.g. the comp running the sniffer.

    example:
    Wiring Closet
    Internet Device (modem, T1 line, etc) > router > hub > switch > APs
    ___________________________________________ |
    __________________________________________ comp with sniffer
     
    Last edited: 2007/04/15
    TonyT,
    #7
  9. 2007/04/17
    visionof

    visionof Inactive

    Joined:
    2006/11/12
    Messages:
    778
    Likes Received:
    5
    Routers

    Most routers will tell you most if not all of this information
    Simple information will be in a status area - in the lan area - what users have logged on and been given ips - should have mac adress info as well
    In the mac filter area if you ask for the current user table it shows you ( at least for wireless at the least those users who are currently logged on)
    You have to turn on mac filtering to search to see who is online currently
    The most advanced features are with the linksys wrt54g router pre version 5 with linux based firmware having a 3rd party firmware.
    You can also set up elaborate router / firewall computers using an old throwaway pc with linux based software - ipcop or smoothwall for example
     
    visionof,
    #8
  10. 2007/04/21
    Rockster2U

    Rockster2U Geek Member

    Joined:
    2002/04/01
    Messages:
    3,181
    Likes Received:
    9
    There is a pretty simple piece of free software called My WiFi Zone which may meet your needs and can also be used to deny access to unauthorized users.

    ;)
     
    Rockster2U,
    #9
  11. 2007/04/21
    JamesonProd

    JamesonProd Inactive Thread Starter

    Joined:
    2004/04/10
    Messages:
    57
    Likes Received:
    0
    Thanks Rockster.....at first look I believe that is going to do what I want!!

    Thanks to all of you for your time and advice.
     
    JamesonProd,
    #10

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...