Connect to internet using wlan0 and channel hopping mon0 as Monitor [closed] - packet-sniffers

Closed. This question is not about programming or software development. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 11 days ago.
Improve this question
I was given a project to count the number of Wifi devices in a room and my research led me to getting an TL-MR3020 and installing OpenWRT on it.
I can set up mon0 in Monitor Mode just fine
airmon-ng start wlan0
Interface Chipset Driver
wlan0 Atheros ath9k - [phy0]
(monitor mode enabled on mon0)
which allows me to use scapy and sniff for Probe Requests on the mon0 interface and stay connected to the internet (in Client/Station/Managed mode) on the wlan0 interface to send the results to my server.
The problem I'm running into is that my sniffing is only occurring on a single channel rather than hopping from channel to channel. I've learned that because the two interfaces share the same radio they must both be on the same channel frequency and that channel is dictated by whatever Access Point wlan0 is connected to.
I can verify that when I disconnect from the AP that channel hopping works just fine
airmon-ng stop wlan0
airodump-ng mon0
What is a good strategy for scanning the entire network spectrum while being able to report my results?

What is a good strategy for scanning the entire network spectrum while being able to report my results?
Use a machine with two Wi-Fi adapters. Keep one of them on the channel for your Wi-Fi network, and use it for communications; do channel scanning with the other one, running it in monitor mode.
Scan the networks and save the results in memory; when you're finished with the scan, switch to the channel for your Wi-Fi network, join the network, and report the results then.

Related

Cant Port forward in Dlink DIR 600M [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 5 years ago.
Improve this question
I have a dlink router..Dlink DIR 600M...I am trying to port forward 1337 and 1334 through my router and opened listener but after enable i checked canyouseeme.org but theres no port opened..i have a cable net connection...my wan ip and public ip is different.
If your WAN IP address and your Public IP addresses are different, you will need to be sure that you first port forward from the public-facing router to your D-Link router. If you do not have access to your public facing router (as is the case with my current network setup), then this port forwarding is not possible.
I have a DIR-651, and there are check boxes next to all the Port Forwarding rules. Make sure those are checked. I've wasted hours of troubleshooting because one of the boxes wasn't checked and saved.
Finally, make sure that you have a server running on the correct IP address and port that you specified on your router. Also, make sure that your firewall is disabled on those ports. If your server isn't configured to respond on those ports, then canyouseeme.org will not respond that those ports are open.

Do I need for forward local ports? [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 8 years ago.
Improve this question
Do I need to forward these ports? Is there a way to do it on Windows 7? I've tried using a program named smart port forwarding but it crashes when the program is running. Thanks in advance.
You shouldn't need to forward those ports in order to be able to run the applications. Chrome and Steam are connecting through those ports to the internet because they are ones that the operating system says are available for outgoing connections and provided them with that unique port number when each application asked for it.
These applications should all run fine for you, without needing to open any ports. Opening a port is most always to let incoming traffic be accepted, not for outgoing traffic to be stopped. A telltale sign that a port is not open is that no connection can be made. If you tried to connect over the internet (port 80) to most random IP addresses, you won't be able to find anything, because the device at that IP address rejected your attempt to open that port to them. So because you are (I am assuming) able to successfully run both Chrome and Steam and have them be able to connect to the internet, you shouldn't be facing a port forwarding issue. The port numbers are just assigned essentially at random each time that an application needs to open an outgoing socket. (this being a simplification of the whole paradigm, but hopefully enough to be able to answer this question).
Edit: And yes, like #Rumesh-Eranga pointed out as well, port forwarding is done at the router level (on the internet router itself) and not at the computer level. It's a way of saying to the router "alright, any time this network receives a request to open port XYZ, send it to this computer that is connected to our local network."

How does garena client sets up a network? [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 11 years ago.
Improve this question
How does Garena works ?? Does it work based on VPN ??? But it doesnot create any virtual network adapter. so how does it creates a network between players ??
One thing is for sure, garena client includes a game launcher. So I suppose when u start any multiplayer game like warcraft via the launcher, it somehow intercepts the packets to and from the warcraft game and send it to the destination via VPN or any other means (Tell me what means are possible for gaming over internet if not VPN)
But how can u do so ?? How can u intercept all packets from a particular application without using any virtual network adapter ? and what protocol could it be using to establish a lag-free gaming experience ??
Assume : windows, warcraft, internet, NAT, Lag free
How does Garena works ??
Last time I used it, GArena gets a list of servers (from a central location), and when you start a game (say CoD4) it lunches the game with the server:port as a parameter and since most of garena users are connecting to the same server, you may thinks that it's garena that is routing the packets to the proper application.
How can u intercept all packets from a particular application without using any virtual network adapter ?
It's called packet sniffing, tools like Wireshark can help you analyse all the packet that are transferred through a network interface without creating a virtual network adapter.
I notice that game must be started from withing Garena client. Maybe they reroute calls to Winsock library once the library is loaded.
I don't know how they did it, but I would do it with layered service provider.

How can I modify/redirect packets in Windows with rewritten OpenVPN tun/tap dirver [closed]

Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 5 years ago.
Improve this question
I want to make an transparent chain-proxy
using a redirect server and chain proxy client written in Qt for Windows.
I've tried ndis+tdi but it's too complicated for me.
I've started to break through the openVPN code.
So the task is to start dummy tap device even if there no need in OpenVPN connection and redirect packets to some addr:port on wich my redirect server will be bound.
Maybe it is better to implement new plugin functions ??...
You can use OpenVPN's TUN/TAP driver ("TAP-Win32") as-is to implement a network device backed by software. I'm not sure what you mean by "rewritten OpenVPN tun/tap driver"; you don't need to modify any existing code - just write your own program which opens TAP-Win32 and reads and writes frames/packets. You don't need any other part of OpenVPN, just TAP-Win32.
However, if you use the TUN/TAP driver, you will have to deal with individual frames/packets. If you will be redirecting just TCP (i.e. you'll redirect connections not packets), it may be useful to have your redirection program only provide a local SOCKS server. With SOCKS you get to work with connections and not packets. If a given network program supports SOCKS, you can simply tell it to use your SOCKS server.
On the other hand, if you want to be able to redirect for all applications, not just those which understand SOCKS (or you don't want to configure each application for SOCKS), you can use a program which will allow you to forward raw TCP connections (on packet level) through your SOCKS server. See my program tun2socks.
Once you have a program operating a TAP-Win32 device, update the routing table to get packets routed into it. You probably want to make it the default route, overriding any previous default routes. But be aware that the routing table applies to the redirection program itself too, so you need to add specific routes for hosts that the redirection program connects to, or they will end up going back into the TAP device. The tun2socks page expains how to do that when using SSH forwarding.
Update: tun2socks deals only with the TUN device and simply forwards all incoming connections. It doesn't decide what you want to forward. Even if it had some policies (like port numbers), it couldn't do anything useful with that info. For example, if it responds with a reject packet, the connection will simply fail - and the OS will not look for an alternative route. (it could forward connections to different SOCKS servers - but I think that would be of no use in your case)
The feature you seem to need is called "policy routing", and it needs to be offered by your operating system. Unfortunately, it appears that Windows does not provide policy routing. If you really need it, you may want to use Linux instead, which provides many more network-related features than Windows (policy routing being one).
Alternatively, instead of using tun2socks, some userspace socksification tool may work for you. These are programs that hook network-related system calls when launching a specific application, in order to make the connections go, for example, through SOCKS. If such an application supports routing rules, it may fit your needs.
An example of such a tool for Windows is ProxyCap (commercial software), which claims support for "flexible routing rules".

Possible to configure OS X VPN to split traffic between VPN and local interface? [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 2 years ago.
Improve this question
I'm using the built-in OS X VPN tool to connect to my company's network. I notice that, when I'm connected, all traffic goes over the VPN.
In the past when I've used the Windows VPN tool I was able to configure it such that only traffic to certain IP ranges and/or host names went over the VPN and everything else went over the local network.
Is that possible with a default OS X VPN? I don't see anything in the settings...
Yes, this is possible. First, you have to remove the checkmark from "Send all traffic over VPN connection" in Settings -> Network -> Your VPN -> Advanced.
Then, from the Terminal you can use "route" to add specific hosts that should be routed via your VPN.
sudo /sbin/route add -host pandora.com -interface ppp0
In this example, "pandora.com" is the host that should be routed via the VPN and ppp0 is the name of the VPN network interface (ifconfig shows you the list of network interfaces).
To make it work also with the Pandora app, you can use
sudo /sbin/route add -host internal-tuner.pandora.com -interface ppp0
and when you finish, you can simply do
sudo /sbin/route delete -host internal-tuner.pandora.com -interface ppp0
I don't have reputation enough to comment on kiteloop's answer (score 28 as of today) or opoloko's answer (score 2 as of today). I was facing the same problem (listening to Pandora on OS X, 10.6.8) and am now listening to Pandora via the Pandora app (which has better sound quality I believe than via browser and certainly uses less CPU (about 3% in activity monitor).
The comment from Maskime to schlingel.me does not lead to a detailed post about Pandora's IP addresses but rather to a photography weblog which does not include that post. Neither does Googling "schlingel + pandora" bring up a current location. It's a dead end.
On the other hand, Opoloko's suggestion for the Pandora app works brilliantly.
Download and install the Pandora OS X app.
Just turn off the checkmark from "Send all traffic over VPN connection" in Settings -> Network -> Your VPN -> Advanced.
Apply changes.
Connect your VPN.
Open terminal.
Run ifconfig.
Look for ppp to discover the exact location of the VPN interface whatever the ppp address is.
Include that string in opoloko's command: sudo /sbin/route add -host internal-tuner.pandora.com -interface ppp0
Additional Notes: In this case you don't need to cover a range of Pandora IP's just the internal-tuner.pandora.com address. All CDN/etc servers don't need to be covered either just the initial internal-tuner.pandora.com. While I thought one could replace internal-tuner.pandora.com with pandora.com this won't work. Neither will a simple wildcard like *.pandora.com work in route. It returns a bad address warning.
To turn off the Pandora VPN, use opoloko's command with the correct ppp interface number:
sudo /sbin/route delete -host internal-tuner.pandora.com -interface ppp0
Happy listening. Huge thanks to opoloko who offered a simple and usable solution to what is a keen issue for music lovers since Last.FM radio went down. Pandora is the only really good suggestion algorithm left standing and which introduces a listener to new music.

Resources