Over the weekend I installed a kismet_drone on the WRAP. It was surprisingly easy.
For those unfamiliar with kismet (http://www.kismetwireless.net) it is like doing a site survey, with heaps of extra features such as WEP, WPA, LEAP etc detection, on the fly WEP decryption if the key is known, data string logging, IP address detection, GPS positioning, packet capture, statistics and a heap more.
I will be putting up a detailed page on how to do it, along with config file examples.
The basic operation is:
you simply configure kismet_drone to use your wireless cards for capturing any wireless transmission and send the data out via a server on port 3501. That way, the WRAP (or WRT54 or whatever) doesnt need to write anything to disk (the WRAP has a read-only operating system).
You then configure kismet on your laptop to use the kismet_drone on the WRAP ethernet interface IP address, port 3501 as the catpure source... instead or as well as your normal wireless card capture device.
so once I started kismet, i had my waveguide, hills 25dBi and my 7dBi external antenna on my laptop all scanning for networks! sweet.. what a great wardriving rig - just not very mobile :-)
I took a screenie of one of the scans. results are:
scan with wireless tools
I wrote a little bash script to do a site survey from the WRAP.
it just does an iwlist eth1 scan on both antennas on every channel. The summary of AP's found is first and then the full results after that. Nice to see the all the Air-Stream SSIDS :-)
I wonder if any is a possible backbone... I picked up Air-Stream-Grange the other day, but after pulling the mast down on the weekend I put it back up and must have moved it, as I didn't pick it up today.
I'd appreciate any reports if anyone stumbles Air-Stream-Woodville-West-1 or Air-Stream-Woodville-West-2.
networks found:
Air-Stream-APANA-NW
Air-Stream-APANA-NE
Air-Stream-Julia-Farr-NW
Air-Stream-Julia-Farr-North
Air-Stream-Carrick-Hill-2
awol-city-westlakes
awol-city-nw-1
BBAnywhere
00:02:2D:30:98:6B (unknown SSID)
00:12:17:BE:26:8F (unknown SSID)
00:40:96:27:F6:8D (unknown SSID)
00:40:96:27:C7:C0 (unknown SSID)
AS SSID
Great Work HaQue all these SSIDs are good for backbones 1 best to 5 least
1 Air-Stream-APANA-NW
5 Air-Stream-APANA-NE
2 Air-Stream-Julia-Farr-NW
3 Air-Stream-Julia-Farr-North
4 Air-Stream-Carrick-Hill-2