Results 1 to 2 of 2

Thread: Kismet "Suspicious Client" question

  1. #1
    Just burned his ISO
    Join Date
    Dec 2007
    Posts
    10

    Default Kismet "Suspicious Client" question

    Okay I searched around a bit and found out what the "Suspicious Client" alert in Kismet means, but I can't figure out why its happening with this certain client. The computer in question is a windows XP machine and is connected to a wireless network that acts like a hotspot (it has a login page and uses many APs). I wanted to show this person airpwn so I tried and it didnt work. I figured I was using the wrong AP so I decided to find out which AP he was on using kismet. I ran it and checked the clients list for each AP (all use the same essid) and his MAC didnt show up on any list. Then later I noticed his MAC was given as the suspicious client and that it was probing networks but not participating. At the same time tho he is shown as connected in windows and is loading webpages, checking email, etc.

    Can anyone tell me why this is?

    Also his machine is about 5ft away from me so I dont think range is an issue.

    *edit* When I say acts like a hotspot i mean it acts like a hotspot, not IS a hotspot. I was trying to show the attack to a net admin at my uni. and the wifi here is done using a hotspot like connection so that they can track if users are trying to download torrents and things like that. Its not like a pay type thing or anything and this attempt was/is purely educational

    thanks

  2. #2
    Developer
    Join Date
    Mar 2007
    Posts
    6,124

    Default

    Just a small warning to try and choose your words carefully when asking about "other " peoples networks because from your post it sounds like you are trying run airpwn at a wifi hotspot.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •