Kismet Wireless

Kismet Forums

 

Posted by:dragorn
Subject:Detecting cards in monitor mode
Date:16:58:15 29/03/2006

> I was wondering if there was any way to detect if there are any cards nearby in monitor mode. After seeing how easy it is to sniff wireless packets I'm being a lot more cautious now and trying to be smarter about what I do over wireless (my college won't secure the campus-wide wireless). My first thought is that detecting a card in monitor mode wouldn't be possible (it's just sitting there recieving) but I don't know that much about how it works, anyone know?

If the drivers and firmware do proper monitor mode, there is no output from the card. For all intents and purposes the tx circuitry can be turned off.

There is no way to detect them.

The only time a card in monitor mode would transmit is if it doesn't properly set the state and the firmware keeps trying to send probe reqs (cisco used to), or if the user controlling it chose to inject a frame.

You should always assume someone is sniffing your data and protect it accordingly. SSH tunnels are your friend, as is openvpn, imaps, etc.

-m


Reply to this message