Tue Feb 20, 2007 6:31PM EST
See Comments (175)
I got these two letters almost back to back, both asking pointed questions about figuring out whether someone else might be on their Wi-Fi network... or how to figure out who owned a nearby wireless network that was unsecured. Take a look.
Rob writes: Â Is there a program (preferably a free download) that enables me to view the computers (users) connected to a wireless signal at any one particular time?
Meanwhile, Zac writes: One of my poor neighbors has their Linksys router set on default configuration. I can even view their configuration page. I am not wanting to do harm to their network, and I don't want to secure it for them without their knowledge. Is there a way to contact the PC listed under the client list, or a program that takes snapshots of their Internet usage (maybe I could see their email address), so I can get a hold of them?
First, you can find out who's connecting to your Wi-Fi network by looking in the DHCP Client List, which is part of your router's configuration and settings software. Just go to the configuration web page (where you set up encryption and passwords, etc.), and look for the DHCP Client List. You'll see the computer name and MAC address of everyone connected. If something fishy is there, you've got an interloper. Be advised that clever types can get around this rather easily: All you really need to do is use a static IP address instead of a dynamic one and you won't show up on the list. However, most computers use DHCP for simplicity, and any casual hangers-on will certainly be DHCP users.
But let's get more complicated: Say you've found an interloper, or like Zac you've found an open wireless network and want to help the owner close it. How do you connect a MAC address to a name?
It's not easily done. Ultra-hackers use advanced tools or directional antennas to figure out the source of a wireless signal, but those are beyond the reach of most users. (Check out Ethereal and AirSnare if you're determined to go this route. Both are software for experts only and are probably overkill for finding an accidental Wi-Fi leech.)
My best advice for beginners is to simply scour the network to see if you can find any shared computers or drives. You might be able to easily pick up a name or address from a file on the network. (This is probably not completely legal, but neither is using your neighbor's open signal, so tread cautiously here.)
With access to the router (as Zac mentioned), some innocuous tricks to get the owner's attention and let him know that his wireless setup is insecure. For example: Change the SSID (or network name) to heyneighborcall5551212, or turn on parental controls (if the router offers them), redirecting popular URLs like google.com, yahoo.com, msn.com, etc. to something like this page.
Unfortunately there's really no foolproof way to figure out who's on your wireless network, so remember to use security at all times and keep tabs on that DHCP list once in awhile. If your network starts to slow down or you fear a hacker intrusion, check out Ethereal and AirSnare at the links above.
Join in the discussion. Here you'll see the comments in the order they were posted.
i've only been on the router site a few times and am a bit intimidated by the directions. If i change this to secured, I have to enter the MAC address of all adapters/wireless cards, of all users, won't I?
If you can get on to your neighbors network and they have any folders shared, simply create a notepad document and name it something obvious that would make them want to read it, explain that their network is WIDE open. That should do the trick.
I would remind everyone that if you change someones SSID that may not know that the changed SSID is there? How would they? Also you run the risk of invading pricay and possible a host of legal issues even if your intentions are true. As far as the static IP idea- some of the linksys types use a proxy ARP to maintain a list even if the address is static based. To best protect yourself you may want to look for devices that offer Intrusion Detection Services (IDS) many of the consumer models may introduce a minimal tool to assist you. This software will alert you if someone connects to your network without your authorization. You may want to check into something like this. As far as Ethereal is concerned, this a dangerous toy. It is a packet sniffer and should not be used without caution- if you use this on someones network this could be a crime.
i've only been on the router site a few times and am a bit intimidated by the directions. If i change this to secured, I have to enter the MAC address of all adapters/wireless cards, of all users, won't I? The answer to this is no. What you are referring to is MAC filtering. Most network technicians feel this type of filtering is quite useless for the reasons you state. Furthermore, MAC spoofing or cloning is quite simple for many attackers who are determined. Try using WPA-PSK (WiFi Protected Alliance Pre-shared Key). As long as you have Windows XP with Service Pack 2, you will find this pretty simple to use. If you do not have XP or Windows 2000, you may have to examine the software that came with your wireless card.
Please enable your browser's cookies to activate the My Tech column.
| Computers | Home Office | Wi-Fi & Networking | Phones & PDAs | Cameras & Camcorders | TV & Home Theater | Portable Audio |
|---|---|---|---|---|---|---|
1 Posted by shutrbug@sbcglobal.net on Thu Sep 3, 2009 9:21PM EDT Report Abuse
Good idea, changing the SSID. I'd change it to PleaseChangeUrPassword or something like that.