[Tfug] Urgent: need to ID some Network Manager icons - STAT!

Ian McEwen ianmcorvidae at ianmcorvidae.net
Tue Jun 12 19:21:52 MST 2012


Sorry for top-post, but second the suggestion of walking around, and
*if* you have a GPS you can hook up with gpsd and such, kismet knows how
to triangulate based on where you are at a given time of beacon + the
strength of signal. It's what's usually used for wardriving + linux.

I don't know that it's relevant, but let me point out that at least one
of the the HPC networks seems to support only 802.11b (up to 11 Mb/s);
may be older hardware.

They are definitely ad-hoc networks, also, but it's hard to know what's
actually up, or if they're actually being used.

If you can connect (both technically and legally, I don't know the
specifics of course) nmap might also be able to get an OS fingerprint.

If you can, you might also get something to dump wireless data, in case
later on it proves useful to be able to do some forensics on it. I'm not
intimately familiar with the tools for this though. Others may have good
suggestions.

On Tue, Jun 12, 2012 at 06:47:13PM -0700, Jim March wrote:
> Disconnecting from my cellphone helped - can anyone help translate this below?
>
> IF those are in fact ad-hoc, that's potentially bad.
>
> Jim
>
> ---
>
> jim at jim-blackthing:~$ sudo iwlist wlan0 scanning
> [sudo] password for jim:
> wlan0     Scan completed :
>           Cell 01 - Address: 7C:61:93:39:1C:FD
>                     Channel:6
>                     Frequency:2.437 GHz (Channel 6)
>                     Quality=70/70  Signal level=-22 dBm
>                     Encryption key:on
>                     ESSID:"PrettyFlyForAWiFi"
>                     Bit Rates:1 Mb/s; 2 Mb/s; 5.5 Mb/s; 11 Mb/s; 18 Mb/s
>                               24 Mb/s; 36 Mb/s; 54 Mb/s
>                     Bit Rates:6 Mb/s; 9 Mb/s; 12 Mb/s; 48 Mb/s
>                     Mode:Master
>                     Extra:tsf=0000000074d2419a
>                     Extra: Last beacon: 1640ms ago
>                     IE: Unknown: 0011507265747479466C79466F724157694669
>                     IE: Unknown: 010882848B962430486C
>                     IE: Unknown: 030106
>                     IE: Unknown: 2A0100
>                     IE: Unknown: 2F0100
>                     IE: IEEE 802.11i/WPA2 Version 1
>                         Group Cipher : CCMP
>                         Pairwise Ciphers (1) : CCMP
>                         Authentication Suites (1) : PSK
>                     IE: Unknown: 32040C121860
>                     IE: Unknown: DD09001018020000040000
>                     IE: Unknown:
> DD180050F2020101800003A4000027A4000042435E0062322F00
>           Cell 02 - Address: 6E:4B:8D:A4:25:B0
>                     Channel:1
>                     Frequency:2.412 GHz (Channel 1)
>                     Quality=33/70  Signal level=-77 dBm
>                     Encryption key:off
>                     ESSID:"HPC4380E"
>                     Bit Rates:1 Mb/s; 2 Mb/s; 5.5 Mb/s; 11 Mb/s
>                     Bit Rates:6 Mb/s; 9 Mb/s; 12 Mb/s; 18 Mb/s; 24 Mb/s
>                               36 Mb/s; 48 Mb/s; 54 Mb/s
>                     Mode:Ad-Hoc
>                     Extra:tsf=000005d623777027
>                     Extra: Last beacon: 1716ms ago
>                     IE: Unknown: 00084850433433383045
>                     IE: Unknown: 010482848B96
>                     IE: Unknown: 030101
>                     IE: Unknown: 06020000
>                     IE: Unknown: 0706555320010B14
>                     IE: Unknown: 2A0100
>                     IE: Unknown: 32080C1218243048606C
>           Cell 03 - Address: 02:2A:8A:03:0E:01
>                     Channel:10
>                     Frequency:2.457 GHz (Channel 10)
>                     Quality=37/70  Signal level=-73 dBm
>                     Encryption key:off
>                     ESSID:"HPC4788C"
>                     Bit Rates:1 Mb/s; 2 Mb/s; 5.5 Mb/s; 11 Mb/s
>                     Mode:Ad-Hoc
>                     Extra:tsf=000008a343e9d409
>                     Extra: Last beacon: 1600ms ago
>                     IE: Unknown: 00084850433437383843
>                     IE: Unknown: 010482848B96
>                     IE: Unknown: 03010A
>                     IE: Unknown: 06020000
>                     IE: Unknown: 0706555320010B14
>
> jim at jim-blackthing:~$
>
> _______________________________________________
> Tucson Free Unix Group - tfug at tfug.org
> Subscription Options:
> http://www.tfug.org/mailman/listinfo/tfug_tfug.org

--
Ian McEwen <ianmcorvidae at ianmcorvidae.net> <ihm08 at hampshire.edu>
A262 D5C4 40CB 0E1C 5F24 C3A1 ABED 1ABD 7131 A76F
http://ianmcorvidae.net/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <http://tfug.org/pipermail/tfug_tfug.org/attachments/20120612/5c00c482/attachment.sig>


More information about the tfug mailing list