Develop Bugs

Wireless Sniffing

Part of my work in network administration is to locate and deal with "rogue" access points that might comprimise network security. Currently I'm using a Sharp Zaurus with Kismet to do this, but I don't always carry it with me and I DO always have my Cingular/AT&T 8525. I basically need a program that will capture all packets from the air into a file that can later be analyzed with Wireshark (Ethereal).
Yesterday I did a search of the Hermes threads looking for such a program and found several for MW5 and TyTn, (which I assume is another Hermes phone). None of them work, because they can't/don't put my WIFI interface into promiscuous mode.
From what I have read, it seems that the wireless drivers are the key here. I'm currently running ROM version vp3G 3.0.0 with Radio 1.41.00.10, which I downloaded from a link found here. Previously I had used several others of the excellent WM6 ROMs available on this forum, but never tried using the 8525 as a sniffer with any of them.
Question: Does anyone know of a ROM/software configuration for the 8525 that will allow promiscuous sniffing of WI-FI networks?
TIA
Walt

Damn, u want your phone to launch missles or something too?

yea and i want an tool to sniff the password of wpa-psk TKIP
thats where the best moment of my life.

Long as we are making requests, I need a packet sniffer that works for the gprs radio of my phone, not the wifi radio. Is there such a creature?
I am no pro at wifi sniffing, but this program had a promiscuous mode, I think.
http://www.airscanner.com/downloads/sniffer/sniffer.html

Long as we are making requests, I need a packet sniffer that works for the gprs radio of my phone, not the wifi radio. Is there such a creature?
I am no pro at wifi sniffing, but this program had a promiscuous mode, I think.
http://www.airscanner.com/downloads/...r/sniffer.html
Yesterday 12:23 PM
Click to expand...
Click to collapse
Now that WOULD be cool! Maybe illegal? Would sniffing data from a cellular connection be the same thing as a cellular wiretap?
I did try AirScanner, and it's a great sniffer, but it won't put the wireless I/F into promiscuous mode, so I can only look at packets addressed to my device.
What I'm really trying to learn here, missles notwithstanding ;D is whether or not this is a hardware limitation. If not, then I will continue to look for software and/or ROM drivers that will work.
Walt

try aircrack

larsuck said:
Long as we are making requests, I need a packet sniffer that works for the gprs radio of my phone, not the wifi radio. Is there such a creature?
Click to expand...
Click to collapse
Not sure what you'd achieve, as encryption is negotiated between each SIM and its authorising server. Intermediate equipment only gets to see the encrypted stream. Even if your chipset was capable of full-time reception, your battery would go down a lot quicker, and all you'd see is how many channels and timeslots are in use, if that!

I need to sniff the ip info of my data connection. I have tried almost every other means of getting it and am at my wits end. I figured it was probably encoded, but at this point I am grasping at straws.

I have used VXsniffer before (http://www.cambridgevx.com) on one of my Ipaq PDAs and it worked great but that was about 2 years ago. I have not been able to find any intrusive "sniffing" programs that have worked on my Tytn but there are tools out there that work with the current ROMs (VP3G's and Schaps) that are like Ministumbler and will show you AP locations. (Wififofum and SniffThis come to mind) They have their bugs but in general they work.
I searched for days when I first got my Tytn for an intrusive sniffer and never found anything.
Brad

I've used WiFiFoFum and Mini Stumbler (off-shoot of network stumbler). I can't say from memory if they do promiscuous or just passive scanning, but both produce results that can be analyzed in NetStumbler or Ethereal.
-Steve
walts said:
Part of my work in network administration is to locate and deal with "rogue" access points that might comprimise network security. Currently I'm using a Sharp Zaurus with Kismet to do this, but I don't always carry it with me and I DO always have my Cingular/AT&T 8525. I basically need a program that will capture all packets from the air into a file that can later be analyzed with Wireshark (Ethereal).
Yesterday I did a search of the Hermes threads looking for such a program and found several for MW5 and TyTn, (which I assume is another Hermes phone). None of them work, because they can't/don't put my WIFI interface into promiscuous mode.
From what I have read, it seems that the wireless drivers are the key here. I'm currently running ROM version vp3G 3.0.0 with Radio 1.41.00.10, which I downloaded from a link found here. Previously I had used several others of the excellent WM6 ROMs available on this forum, but never tried using the 8525 as a sniffer with any of them.
Question: Does anyone know of a ROM/software configuration for the 8525 that will allow promiscuous sniffing of WI-FI networks?
TIA
Walt
Click to expand...
Click to collapse

I have never heard of promisc mode being possible on any WM device. I believe i've read that it is in fact a hardware limitation. but who knows, with all the hacked drivers that float around maybe someone will get around this.
now that i mention it... it could be sufficient to disassemble the wireless drivers / ip stack (they are NOT on the radio rom) and NOP out the function that checks the mac address. or change the branch instruction at the end of it to "always execute" as if it were matching the device's own mac address. hmm. it wouldn't be true promisc mode, but it could work.
think i might give it a go myself.
in the mean time, if youre concerned about rogue APs on your network, check out my recent post about my discovery of how to enable Internet Sharing over WiFi (turns the phone into an Access Point):
http://forum.xda-developers.com/showthread.php?t=332360
not directly related, but might be of interest.
fluxist

larsuck said:
I need to sniff the ip info of my data connection. I have tried almost every other means of getting it and am at my wits end. I figured it was probably encoded, but at this point I am grasping at straws.
Click to expand...
Click to collapse
Tried vxIPConfig from Cambridge (http://www.cambridgevx.com) ?

gregnash said:
Tried vxIPConfig from Cambridge (http://www.cambridgevx.comhttp://www.cam.com) ?
Click to expand...
Click to collapse
Looks like it could be a winner. Since I do not know enough of the teck behind it all, if someone tries this out and it works out, report back your findings for the rest of us
GB

walts said:
Question: Does anyone know of a ROM/software configuration for the 8525 that will allow promiscuous sniffing of WI-FI networks?
Click to expand...
Click to collapse
For trinity and hermes, I've found nothing. Drivers... you know
But Airscanner is the best, I'm using it on an Ipaq...
Ciao

larsuck said:
I need to sniff the ip info of my data connection. I have tried almost every other means of getting it and am at my wits end. I figured it was probably encoded, but at this point I am grasping at straws.
Click to expand...
Click to collapse
try to tether and run www.speedtest.net unless your network is on a proxy
from your computer it will be easy to dermine the IP. www.speedtest.com is easy because it tels your speed + ip and carrier connection

gemblaster said:
Looks like it could be a winner. Since I do not know enough of the teck behind it all, if someone tries this out and it works out, report back your findings for the rest of us
GB
Click to expand...
Click to collapse
vxIPConfig is not a packet sniffing tool like Wireshark (Ethereal) or the like. It gives you "ipconfig /release" and "ipconfig /renew" functions and can give you TCP, UDP and IP stats but can’t actually capture the packets and view the encapsulation headers.
AirScanner and vxSniffer are the only 2 moderately priced utilities that can do that for WindowsMobile that I am aware of.

Park City said:
vxIPConfig is not a packet sniffing tool like Wireshark (Ethereal) or the like. It gives you "ipconfig /release" and "ipconfig /renew" functions and can give you TCP, UDP and IP stats but can’t actually capture the packets and view the encapsulation headers.
AirScanner and vxSniffer are the only 2 moderately priced utilities that can do that for WindowsMobile that I am aware of.
Click to expand...
Click to collapse
Just checked those two out and our Hermes WiFi adapter doesn't support promiscuous mode

Memnoch30 said:
Just checked those two out and our Hermes WiFi adapter doesn't support promiscuous mode
Click to expand...
Click to collapse
Is there anyone that understands the inner workings of our WiFi adaptors and drivers that may be able to shed some light if there would be a hack that would make our Hermes compatable with these programs? If so then maybe the search could be over . So far this looks like the closest it's come.

Sniffing
I also am in the field of network security.
I use Wififofum for searching and logging all wireless networks. It has filters such as show only non secure etc. It also has GPS log support. You can then convert the log files to upload as a overlay on google earth.
Airscanner works great on the trinity as a packet sniffer of the wireless.
Just my 2cents

It doesn't matter how many programs you try it won't work. Promiscuous mode is being prevented by the driver. The only possible work around would be if someone made a new driver using an open source driver. Since HTC has not released any open source drivers for their device I see no possible solution.

VPN Software

Anyone have any experience with a working VPN client freeware or not on the TP2?

dezoris said:
Anyone have any experience with a working VPN client freeware or not on the TP2?
Click to expand...
Click to collapse
Google is your friend..
http://www.google.com/search?client...reeware+windows+mobile+vpn&btnG=Google+Search

Google is indeed one's friend, and I expect the OP has done many searches exactly like the one above, as I have.
However if you go beyond looking at the google headlines you soon discover that none of these solutions is in fact freeware, as he had requested.
So far I've spent many many hours trying to find a decent winmo IPSec client, free or reasonably priced, and my conclusion so far is that there isn't one. None I can find are free, and the ones that don't cost ridiculous money all have serious functional issues and/or stupid design decisions like requiring you to run their PC version to be able to create security profiles for the mobile one.
Dennis

Actually I see the OP in fact asked for free or otherwise, but they also asked if people had experience with such things, not just were they around.

What about
http://www.zeroshell.net/eng/openvpn-client/#OpenVPN-Windows-Mobile

OpenVPN is extremely nice, but it only works against OpenVPN servers. If you're trying to do IPsec VPN, OpenVPN won't help.

I have done a google search but the results are so generic. I figured people using some of the best WinMo phones would have tried some of these.
I tried searching XDA but did not really come up with anything.
Open VPN probably will not work for me unfortunately.
I need something compatible with cisco.

There are numerous kinds of ipsec, you'd need to tell us which ones your cisco device supports. I've used the openvpn client on the tp2 to some success.
This page has always had the most info in ipsec, I recommend checking some of the various guides on it.
http://www.jacco2.dds.nl/networking/openswan-l2tp.html#No_MSCHAP
Here's a quote from it:
Windows Mobile and Pocket PC 2003 ship with a built-in L2TP/IPsec client. Requires MS-CHAP support in pppd.
Click to expand...
Click to collapse
I think it's relatively easy to connect to Windows based VPN servers running MS software but I'm not so sure how well it fares with Cisco kit. I'd be surprised if the cisco box didn't support the l2tp protocol, I think it's very common. I believe the incompatibilities come about from the authentication part, which is what the MS-CHAP support mentioned above refers to. Further down the linked page it mentions Cisco kit.

I use the Bluefire Security Technologies Mobile Security VPN 2.7.5.706 .
However it seems Bluefire is out of business...
But it works perfectly for establishing VPN connections to Cisco routers and PIX/ASA's, even with token authentication.

Previously I used the Bluefire client for a few years and it was the only reliable one for Cisco concentrators, but as you said they have gone out of business now.
Also recently I've found I can't get the Bluefire client to work with some of the newer roms I've flashed (NRG etc.), perhaps changes in the newer winmo network stack or something.
I have tried the others and they are expensive and to be honest too much hassle to set up and have lousy error reporting to work out what you did wrong, I've wasted days, literally.
If you have the newer Cisco VPN kit they have dropped IPSec and gone for SSL VPN instead and do their own client for Windows Mobile which is OK.
rdleeuw what rom are you using, stock?
G

I'm using the stock ROM 1.19.401.0 (51489) WWE with Radi0 3.44.25.27 .

[Q] Why does the VPN suck in Android?

Does anyone know of a ROM in which the PPTP VPN actually works? I've tried 6 or 7 different roms today and have yet to find one that works. Is this a Google issue, or something else? Surely some developer must have tested this function and can speak to whether or not the VPN works. I recall that in WINMO only a few roms had reliable VPN functionally, Mighty Mike and Silence come to mind. Just to be clear...here is what is generally happening; the VPN connects without a problem. The RAS server displays the connection and shows packets in and out. Some roms will not route one packet properly to the device. Others will appear to work great, pinging remote resources, but as soon as you try to do anything else, i.e. RDP, the connection crashes.
Thanks

Swann Security Remote View, Home WiFi Works, Mobile Data Doesn't

Hello all!
Recently I've purchased the Swann DVR8-1425 security system.
I've been able to connect it to my home network successfully. I can remote view the cameras through my T999L (no root, completely stock) on WiFi through the SwannView app, but as soon as I put it into mobile data, it shows me a message of not being able to contact the server. I'm assuming if I were at someone elses house on their WiFi, it would be the same result. Same issue on my Dad's S2, rooted, running Infamous 3.0 in the T989 forums.
I've messed with most, if not all the settings I can possibly use with trial and error. When it comes down to it, obviously there's only the one setting that works with my WiFi (the given IP address from the DVR and a server port given: 9000) and it won't connect with mobile data whatsoever (2g, 4g, or LTE). I've tried using HTTP port 85 instead of the 9000, a preferred DNS server in place of the IP address, turning on and off UpNp (not really sure what that does). Absolutely nothing. Server connection fail each time when using mobile data.
I've disabled the firewall in hopes of it working, but I've had no luck. Haven't reset the router, assuming I just unplug and replug but other than that, I'm out of ideas. Not sure what else I can work on besides the firewall, if that even does anything.
The Swann software installed on my Mac does work, but haven't had a chance to test it somewhere other than my home network. It could work, but I wouldn't know at this point. Just more concentrated on the mobile data issue.
My knowledge is small when it comes to this networking stuff. Connecting to a WiFi hotspot is about as easy as it gets for me lol. I just got lucky with trial and error for setting it up with the home network. Just wondering if anyone has experience with this or ideas that may come to mind. At the worst, I won't be able to remote view anywhere other than using my wifi, but it will still record at least.
Thanks in advance!

MyanRagahis said:
The Swann software installed on my Mac does work, but haven't had a chance to test it somewhere other than my home network. It could work, but I wouldn't know at this point. Just more concentrated on the mobile data issue.
Click to expand...
Click to collapse
^^^^^
Seems to me you should test the remote connection elsewhere before you start troubleshooting a problem thst may not even exist. If its not configured correctly to do what you want, its not going to work across the internet which would include the mobile data.
Make sure you can access what you want remotely, then test over mobile data. Unless I read that wrong it doesn't sound to me like you've done this. You can test the mobile data connection all you want, but if its not working remotely by any other means you will be wasting your time. (Unless you got lucky and configured it correctly, but as you said, youre not very experienced with this).
Until you verify it does work remotely, there's no reason to assume its your phone or T-Mobile that is the problem.
Tbh, I'd assume first it was a router config on your side. (Unplugging it doesn't reset its settings, and even if it did it may not be configured as needed by default.)
You'd probably find better support by going to the equipment website and router website.
Sorry I don't have the answer your looking for, but hopefully ill get you in the right direction.
Sent from my SGH-T999 using xda premium

DocHoliday77 said:
^^^^^
Seems to me you should test the remote connection elsewhere before you start troubleshooting a problem thst may not even exist. If its not configured correctly to do what you want, its not going to work across the internet which would include the mobile data.
Make sure you can access what you want remotely, then test over mobile data. Unless I read that wrong it doesn't sound to me like you've done this. You can test the mobile data connection all you want, but if its not working remotely by any other means you will be wasting your time. (Unless you got lucky and configured it correctly, but as you said, youre not very experienced with this).
Until you verify it does work remotely, there's no reason to assume its your phone or T-Mobile that is the problem.
Tbh, I'd assume first it was a router config on your side. (Unplugging it doesn't reset its settings, and even if it did it may not be configured as needed by default.)
You'd probably find better support by going to the equipment website and router website.
Sorry I don't have the answer your looking for, but hopefully ill get you in the right direction.
Sent from my SGH-T999 using xda premium
Click to expand...
Click to collapse
After read this earlier, I facepalmed myself and went to go test this out. Drove over to Starbucks a few minutes ago, connected to their wifi through my phone and it didn't connect Hmm...definitely a router setting then. The dvr itself is connected to the router by an ethernet cable. Just a matter of figuring out how to configuring the router settings. Thanks!

Try bluestacks

Hey. I came across this page looking for a solution to a similar problem. My new swann system connects fine with my phone on Orange but wouldn't connect to my partners identical phone on Vodafone via mobile Internet. Both worked on wifi. I solved by asking Google for my ip address, then going onto the swannview link app, under my device is a button to edit, on the edit page where it has p2p if you tap the line it gives you another option to connect with ip, then enter your ip where it says host. Save details with icon in top right and log in. This solved my issue, hope it helps anyone with the same issue.
MyanRagahis said:
Hello all!
Recently I've purchased the Swann DVR8-1425 security system.
I've been able to connect it to my home network successfully. I can remote view the cameras through my T999L (no root, completely stock) on WiFi through the SwannView app, but as soon as I put it into mobile data, it shows me a message of not being able to contact the server. I'm assuming if I were at someone elses house on their WiFi, it would be the same result. Same issue on my Dad's S2, rooted, running Infamous 3.0 in the T989 forums.
I've messed with most, if not all the settings I can possibly use with trial and error. When it comes down to it, obviously there's only the one setting that works with my WiFi (the given IP address from the DVR and a server port given: 9000) and it won't connect with mobile data whatsoever (2g, 4g, or LTE). I've tried using HTTP port 85 instead of the 9000, a preferred DNS server in place of the IP address, turning on and off UpNp (not really sure what that does). Absolutely nothing. Server connection fail each time when using mobile data.
I've disabled the firewall in hopes of it working, but I've had no luck. Haven't reset the router, assuming I just unplug and replug but other than that, I'm out of ideas. Not sure what else I can work on besides the firewall, if that even does anything.
The Swann software installed on my Mac does work, but haven't had a chance to test it somewhere other than my home network. It could work, but I wouldn't know at this point. Just more concentrated on the mobile data issue.
My knowledge is small when it comes to this networking stuff. Connecting to a WiFi hotspot is about as easy as it gets for me lol. I just got lucky with trial and error for setting it up with the home network. Just wondering if anyone has experience with this or ideas that may come to mind. At the worst, I won't be able to remote view anywhere other than using my wifi, but it will still record at least.
Thanks in advance!
Click to expand...
Click to collapse

Fix
Hello..
I am also using Lorex wireless security camera for my home but till now I am not facing any issue because all configuration is performed by experts. But I have two fixes for your issue.
Either contact with Lorex Support Team for help or follow steps:
Check with your mobile data service provider to confirm if they allow streaming of constant information over their network.
Configure a lower substream video resolution in your DVR / NVR settings to reduce mobile data usage and increase your connection speed.
If you cannot connect to your cameras using an LTE or IPv6 connection, switch to a 3G connection.
If you are using a device ID through your mobile plan, set up a Dynamic Domain Name System (DDNS) to eliminate the need to pass through the Stratus / FLIR Cloud servers.
Hope it helps!

[Q] No VPN api

Got my prefered VPN installed. Attempted to activate. Pop-up with "No VPN api".Sigh... With no api, this isn't going to be solved until root/custom rom, right?

CaptHatch said:
Got my prefered VPN installed. Attempted to activate. Pop-up with "No VPN api".Sigh... With no api, this isn't going to be solved until root/custom rom, right?
Click to expand...
Click to collapse
it's possible the VPN api is even there, just that our user doesn't have enough privilege to access it...
so, yeah probably. something like Cisco AnyConnect Root or other flavors of rooted ones. or if Amazon gets enough requests/complaints or somehow finds the motivation to support vpn.
if that guy making xbmconfire has success getting amazon to accept his launcher screen, it's possible they would accept other developers submitting vpn support (or, usb mass storage support, lol) - I'd definitely pay money for stuff like that.
...
only other stuff I found was from p[oking around in the sideloaded Settings.apk, I can open VPN under the wireless "More..."
but it immediately says "You must set a lock screen PIN or password before you can use credential storage"
if I try a numeric PIN, it crashes back a screen, as soon as I enter the 4th digit
if I try a password, it crashes, as soon as I enter the 4th character or digit.
if I try a pattern, it crashes as soon as I press "Next"

router tunnel?
had an idea that should have occurred to me long ago
a place I used to work, we used to set up permanent site-to-site VPN tunnels between offices all over the world. and it worked really well. this was with business class switch/router hardware of course.
but routers with ddrwt/openwrt/tomato/etc. are now capable of a lot of the same functions - between/amongst each other, mostly (plus in my experience, tunnels behave better if you have the exact same device on each end anyway). and support all sorts of common flavors - l2tp/ipsec, pptp, openvpn...
I have never tried any of the paid public/popular VPN host services, so I don't know if they only support direct VPN clients from single devices, or if they support site-to-site tunnels too. I imagine if some did, they would advertise so on their website.
if tunnel connection is supported by providers, that might be a workaround. (possible annoyance: all traffic from behind your router would also be on VPN, unless maybe some fancy routing glue code is applied)
another way is if someone in UK has ddwrt router and has a friend in US with ddwrt router, you could totally set up site-to-site -- this is existing functionality. of course there still probably needs routing glue on both ends (mainly, knowing most/all of the amazon services IPs used by firetv apps)
probably too much time/work/testing, but...