How can I 'sniff' network traffic from a wireless access point? What
tools are there and how commonly available are they? I am interested
in finding out how secure my AP is with and/or without WEP and what it
would take for someone to intercept my passwords, etc.

---

Clarification of Question by bigsticks-ga on 19 Jan 2005 16:33 PST

BTW, I'm not worried about someone using the bandwidth from my AP.
Only concerned about someone intercepting what I'm typing in while
connected to my wireless AP.

I don?t think it is really secure at all without encryption. I saw a
projects source book at Barnes and Noble the other day that detailed
how simple it is to sniff out connections, and how to build your own
simple antennas out of common items.

I have a friend who drives around in his car, with just with his
laptop, card and some sniffing program he got off the net, and says he
can even get in through encrypted connections. But then it comes down
to your firewall and basic computer security if they are going to get
in to your system.

Anyway, this is just an offhand comment and don?t answer your
question. I use encryption as just another layer myself, and to cut
down on losing bandwidth.

Oh, yeah, I would be really surprised if many people can capture the
actual data stream between your computer and your wireless router,
except maybe the CIA. I think it would be far easier if they just
broke in to your computer via your internet connection because of some
common security hole, or malicious software you opened/downloaded, as
is more usual.

Netstumbler (www.netstumbler.com) works on Windows. I've used Kismet,
but that is for Linux.

Actually, Using WiFi means it's concern only at lower networking
layers. At upper layer (Transport Layer and above layers ) it's same
as out normal wired internet.

Any one can put network sniffer (like ethrel on linux os) and grab the traffic.

If someone using important data unsecurely ( without Transport Layer
Security. e.g. SSL etc.) then this can be dengerous.

If using SSL then no need to worry.

Tools:

Kismet 
AirSnort 
tcpdump 
Ethereal 
arpwatch 

As anything useful, they are very available.

Also see:

http://www.oreillynet.com/pub/a/wireless/excerpt/wirlsshacks_chap1/

http://www.wardrive.net/wardriving/tools

http://corky.net/2600/wireless-networks/wi-fi-software-tools.shtml

also see

http://www.securityfocus.com/infocus/1814