I think you're right, however, sometimes there's no traffic between client and AP, and higher level application data is simply not available.
OTOH, I'm surprised (and happy) to see that my ubuntu is able to use the broadcom's reverse-engineered kernel driver + kismet to make passive sniffin'with very good results. This is something that even the windows driver is not able to do.
Just my (short) experience. A suggestion.
on
Dealing with Intruders?
·
· Score: 2, Interesting
Last week I managed to login as root into a machine (from a chinese domain, as usual) for which I had packets logged in my firewall's log. Then, I installed in that machine chkrootkit: lots of executables were wrong (rootkits). Then, someone logged in remotely and left in/root a "readme.txt" message warning me not to log in other's computers.... Finally I did three things:
1.- Send an e-mail to the contact-addresses retrieved from APNIC
2.- Copied my shutdown executable to that machine (the original was obviosly tricked)
3.- Remotely, executed @> shutdown -h now
Just a suggestion.
Sure you can!. I've been checking HP's page for the nx5000, and it seems that Linux is only 50 bucks worth less than XP Professional + Office packages. Humm, seems HP is trying to earn some margins with the Linux version.
Slashdot Mirror
I think you're right, however, sometimes there's no traffic between client and AP, and higher level application data is simply not available.
OTOH, I'm surprised (and happy) to see that my ubuntu is able to use the broadcom's reverse-engineered kernel driver + kismet to make passive sniffin'with very good results. This is something that even the windows driver is not able to do.
Either:
1.- This is FUD or
2.- my ISP (incumbent in Spain) is plainly breaking the law.
The following capture is from my personal MLDonkey software at 16:29 Local Time.
> bw_stats
Down: 8.5 KB/s ( 0 + 8711 ) | Up: 9.5 KB/s ( 0 + 9730 ) | Shared: 7/2.16G | Uploaded: 566.6M
Regards.
Last week I managed to login as root into a machine (from a chinese domain, as usual) for which I had packets logged in my firewall's log. Then, I installed in that machine chkrootkit: lots of executables were wrong (rootkits). Then, someone logged in remotely and left in /root a "readme.txt" message warning me not to log in other's computers .... Finally I did three things:
1.- Send an e-mail to the contact-addresses retrieved from APNIC
2.- Copied my shutdown executable to that machine (the original was obviosly tricked)
3.- Remotely, executed @> shutdown -h now
Just a suggestion.
Sure you can!. I've been checking HP's page for the nx5000, and it seems that Linux is only 50 bucks worth less than XP Professional + Office packages. Humm, seems HP is trying to earn some margins with the Linux version.