Re: IP address

"Kenzo" <[email protected]> writes:

> I was wondering if looking at the log files generated from dstumbler, If I
> could determine the ip or range of ip that the node and/or ap is on.
> I know that kismet will do that, but it doesn't like FBSD.
> so can I figure out the ip address of the traffic I'm looking at, is it in
> there someonewhere listed in hex or something that I don't know how to read.
> or can I use some other utils to find that.

Using tcpdump I guess (since WEP is broken).

Otherwise, I'm very curious on an alternate methode to
guess this.

Another thing, I have observed that a part of the traffic
is not crypted, that is TCP ACK packet that I see,
using a airmagnet sniffer against a 64 bit weped network
composed by a  orinoco silver and BEFW11S4 AP from linksys.

Am I going slightly mad or is this thing is possible ?
(got a pcap capture file of this traffic if someone see an
interest).

-- 
      rahan

                   [email protected]