Download Wireless-Hacks-100-strength-tips 4547KB

One interesting side effect of passive scanning is that channel detection isn't 100 percent
reliable. Since 802.11b channels overlap, it is sometimes difficult for a passive scanner to
know for certain which channel an access point is tuned to, and it can be one off from time to
time. The AP in Figure 3-21 is actually set to channel 3, although it is reported as channel 2.
KisMAC allows you to specify which channels you would like to scan on. This can help if you
are trying to find access points that are using the same channel as your own. See Figure 3-21
.
Figure 3-21. You can select only the channels you need to scan in
KisMAC.
KisMAC has a slew of nifty features, including GPS support, raw frame injection (for Prism II
and Orinoco cards), and even a real-time relative traffic graph (Figure 3-22). If it detects a
WEP network, it can use a number of advanced techniques to try to guess the password. And
yes, it can even read discovered ESSIDs aloud.
Figure 3-22. Show the relative traffic of all detected networks, without
transmitting a single bit.
Perhaps the most powerful feature of all is KisMAC's ability to log raw 802.11 frames to a
standard pcap dump. Check the "Keep Everything" or the "Data Only" option in preferences to
save a dump file that can be read by tools such as Ethereal [Hack #39].
Page 79