How can I find out if somebody is or has ever hacked my wireless?

culabula88

How can I find out if somebody is or has ever hacked my wireless? My wireless bb connection might have been hacked ie used by somebody else. is there any way in which I can install softwear to see how many users are on the network at any given time or are sharing the BB connection.

I am aware of changes i could make to encryption etc. but seems that all wireless encryption could be broken.

Voodu Child

The very simplest thing to do is to log on to your router homepage (using your internet browser). Check the manual for the address.

Depending on the router, you should be able to navigate through the menus and find the IP addresses allocated and the MAC addresses of devices connected.

culabula88

Any way i could check to see what times the different PCs have logged on or a report of the computers that logged on a given day?
Also how do i restrict the router to only certain PCs

What exactly are MAC addresses?

Spear

culabula88 wrote: »

Any way i could check to see what times the different PCs have logged on or a report of the computers that logged on a given day?
Also how do i restrict the router to only certain PCs

What exactly are MAC addresses?

A MAC address is an address assigned to a piece of hardware such as a network card, which should be unique and permanent in theory. A protocol called ARP is then used to find out the link between each MAC address and an IP address.

PogMoThoin

culabula88 wrote: »

Any way i could check to see what times the different PCs have logged on or a report of the computers that logged on a given day?
Also how do i restrict the router to only certain PCs

Yes, all the information should be logged in the dhcp leases logs, have a look around in the router menu's. Sometimes it even gives the name of the device/laptop.

You can enable mac address filtering, ie allow only specific mac addresses to use the network & block all others.

Capt'n Midnight

PogMoThoin wrote:

Yes, all the information should be logged in the dhcp leases logs, have a look around in the router menu's. Sometimes it even gives the name of the device/laptop.

You can enable mac address filtering, ie allow only specific mac addresses to use the network & block all others.

If using windows type
ipconfig /all to see your mac it's liek 01-56-AB-25-D4-01

Sniffers can see MAC addresses,
In linux it's a one liner to change MAC address on the fly

PogMoThoin

Capt'n Midnight wrote: »

Sniffers can see MAC addresses,
In linux it's a one liner to change MAC address on the fly

I'm assuming its his neighbour stealing his bandwidth and also assuming he doesn't have the knowlege to spoof a mac address. Of course its crackable, but the more layers of protection the better.

culabula88, I hope you're using WPA2 encryption and not just leaving your network open for your neighbour, or could you have given him the passphrase? I suggest You change it

buckfast4me

Why exactly do you think it might have been hacked?

culabula88

PogMoThoin wrote: »

I'm assuming its his neighbour stealing his bandwidth and also assuming he doesn't have the knowlege to spoof a mac address. Of course its crackable, but the more layers of protection the better.

culabula88, I hope you're using WPA2 encryption and not just leaving your network open for your neighbour, or could you have given him the passphrase? I suggest You change it

Im using WEP - standard netopia - changed the SSID there a few months back after the eircom security flaw. Didnt change to WPA as i was afraid Id make a mess of the settings but may do later when Im not as busy.Is WPA difficult to crack - i thought it could only be done using some sort of program.

- i think it might have been hacked as one day my speed was slower than dial up for example.

Spear

culabula88 wrote: »

Im using WEP - standard netopia - changed the SSID there a few months back after the eircom security flaw. Didnt change to WPA as i was afraid Id make a mess of the settings but may do later when Im not as busy.Is WPA difficult to crack - i thought it could only be done using some sort of program.

- i think it might have been hacked as one day my speed was slower than dial up for example.

WPA can be cracked but only by brute force and dictionary attacks. With a lengthy passphrase it still make for a serious obstacle to an intruder.

culabula88

PogMoThoin wrote: »

Yes, all the information should be logged in the dhcp leases logs, have a look around in the router menu's. Sometimes it even gives the name of the device/laptop.

You can enable mac address filtering, ie allow only specific mac addresses to use the network & block all others.

I looked at this alright - but it will only give the information since i have last turned on the router...

Capt'n Midnight

culabula88 wrote: »

Im using WEP - standard netopia - changed the SSID there a few months back after the eircom security flaw. Didnt change to WPA as i was afraid Id make a mess of the settings but may do later when Im not as busy.Is WPA difficult to crack - i thought it could only be done using some sort of program.

- i think it might have been hacked as one day my speed was slower than dial up for example.

WEP can be cracked in several minutes.

WPA can be fiddly ,try using a HEX password if you are having problems. HEX means just characters 0-9 and A-F .