Program to scan my network for other computers on my network?

[TheGizmo]

This is at a motel network, we give the passwords to guests for using the Wifi (Wep).. well I believe someone from near my home is on my network and hogging all my bandwidth. My guess is they have manually configured their IP onto my network, because if it was through the DHCP, my router would show them get an IP lease. I know I could just change the password, but that would screw up all the other people on the network. I am trying to figure out if I can somehow scan the network from my computer, that way if I can find the person I Can block their mac address from using my network. Any ideas? Thanks

 

[nweaver]

nmap -P0 192.168.0.0/24


that usually works even if they have a non pingable firewall.

 

[TheGizmo]

Originally posted by: nweaver
nmap -P0 192.168.0.0/24


that usually works even if they have a non pingable firewall.

I'm using windows.. any programs for Windows? thanks

 

[jlazzaro]

nmap can run on windows...scroll down a bit.

 

[TheGizmo]

Originally posted by: jlazzaro
nmap can run on windows...scroll down a bit.

schweeet, running the scan now, thanks weaver and lazzaro

 

[JackMDS]

IMHO this is the best, http://www.softperfect.com/products/networkscanner/

 

[WingZero94]

Good Thread

 

[n0cmonkey]

tcpdump. Active scanning is for chumps.

 

[Fullmetal Chocobo]

Nevermind.

 

[nweaver]

Originally posted by: n0cmonkey
tcpdump. Active scanning is for chumps.

yep, except tcpdump won't/may not get everything you need. And some of us like active scanning.

I help a small wireless WISP, and we just run NTOP on the border of the network, that works great for figuring out who is hogging b/w, who isn't supposed to be there, etc.

 

[n0cmonkey]

Originally posted by: nweaver

Originally posted by: n0cmonkey
tcpdump. Active scanning is for chumps.

yep, except tcpdump won't/may not get everything you need. And some of us like active scanning.

I help a small wireless WISP, and we just run NTOP on the border of the network, that works great for figuring out who is hogging b/w, who isn't supposed to be there, etc.

tcpdump gets it all, if you put your sniffer in the right place.

 

[nweaver]

Originally posted by: n0cmonkey

Originally posted by: nweaver

Originally posted by: n0cmonkey
tcpdump. Active scanning is for chumps.

yep, except tcpdump won't/may not get everything you need. And some of us like active scanning.

I help a small wireless WISP, and we just run NTOP on the border of the network, that works great for figuring out who is hogging b/w, who isn't supposed to be there, etc.

tcpdump gets it all, if you put your sniffer in the right place.

but if it's my network, then I have a right to scan it and look for unauthorized access. I understand placement of sniffer (in this case, I would span a port that the AP hangs off of). running a quick nmap scan is going to find something quicker then the other way.

 

[n0cmonkey]

Originally posted by: nweaver
but if it's my network, then I have a right to scan it and look for unauthorized access. I understand placement of sniffer (in this case, I would span a port that the AP hangs off of). running a quick nmap scan is going to find something quicker then the other way.

Maybe. There are more ways to fool nmap than there are tcpdump.

 

[nweaver]

Originally posted by: n0cmonkey

Originally posted by: nweaver
but if it's my network, then I have a right to scan it and look for unauthorized access. I understand placement of sniffer (in this case, I would span a port that the AP hangs off of). running a quick nmap scan is going to find something quicker then the other way.

Maybe. There are more ways to fool nmap than there are tcpdump.

if the OP has a person who can get around nmap, then they won't know how/what to do with tcpdump to find the person.

 

[n0cmonkey]

Originally posted by: nweaver

Originally posted by: n0cmonkey

Originally posted by: nweaver
but if it's my network, then I have a right to scan it and look for unauthorized access. I understand placement of sniffer (in this case, I would span a port that the AP hangs off of). running a quick nmap scan is going to find something quicker then the other way.

Maybe. There are more ways to fool nmap than there are tcpdump.

if the OP has a person who can get around nmap, then they won't know how/what to do with tcpdump to find the person.

Good point.

Just two different (and equally valid) views on how to handle the same problem. That's what makes the industry fun.