Monitoring and security of wireless network

Hi shgh

I don't think this is a good forum for those questions - this is a forensics forum. You need to consider tracking down security forums and could probably benefit from googling some ethical hacking forums - I read a lot on the hacking forums and while the flip side of the coin you are holding is actually relevant to your topic.
good luck,
j

Hi shgh

I don't think this is a good forum for those questions - this is a forensics forum. You need to consider tracking down security forums and could probably benefit from googling some ethical hacking forums - I read a lot on the hacking forums and while the flip side of the coin you are holding is actually relevant to your topic.
good luck,

Hi Jfk92,
I agree with you that monitoring is not directly attributable to forensic but I think everyone who works with forensic is more or less working on IT security in some way and monitor wired and wireless networks is an important askpekt. That's why I asked the question here in the forum.

But thanks for the tip.

Sincerely,
shgh

Personally I think it's very relevant, but of course it depends on exactly what you mean by "monitoring" I suppose.

Personally I think it's very relevant, but of course it depends on exactly what you mean by "monitoring" I suppose.

What I want to monitor on wireless network is as follows

- Prevent the interception of network
- Check which ports and protocols used on the network
- Check the connections are to the network
- Check the information flow on the network
- Check the information sent from the router or access points

OK, in that case it probably is more security than forensics.

- Prevent the interception of network
- Check which ports and protocols used on the network
- Check the connections are to the network
- Check the information flow on the network
- Check the information sent from the router or access points

Your question is not clear.

You talk about Wireless networks, WLAN and WMAN, but then you ask about various layer 3 and up stuff.

The "Wireless" part of Wireless networks are at ISO OSI layers 1 and 2.

Most of your questions (with the exception of the first) is of no relevance of what is at layers 1 & 2.

Wireless networks are radio signals. To intercept at layer 1 is extremely simple, but to block very costly (radio signal blocking paint, wall paper, distance, directional jam, etc.)

There are no ports at the "Wireless" layer (physical and data link). Once you get to layers where there are "ports", you do not know about "Wireless".

Detecting listening devices at the Wireless networks layers, (physical) will be very expensive. Detecting at network layer and above, you can use anything and is not dependent on "Wireless".

All the rest of your questions, you can use most monitoring tools independent of "Wireless" or not.

Just my opinion, and ISO OSI layers. mrgreen

Hi Jhup,
Well, maybe the question has not been clear.
What I wrote earlier was a summary of what I want to check on the network and not just the wireless network.
And if I do not write the question clearly does not mean I can not OSI model, is not it!

Sincerely,
shgh

shgh,

Combination of snort, & Vontu would cover most of what you asked for.

Hi Jhup,
Well, maybe the question has not been clear.
What I wrote earlier was a summary of what I want to check on the network and not just the wireless network.
And if I do not write the question clearly does not mean I can not OSI model, is not it!

Sincerely,
shgh

OK - so I agree - there is 'relevance' through a natural interaction and data you may consider during a forensic examination - I was just trying to get you to maybe a forum that may be able to provide you with more direct answers to your questions.

Something you may want to consider reading about is a linux distribution of ubuntu called "honeproject". it's available on the github.com/honeproject . It's an interesting tool available free that is from what I recall a more pro-active than reactive security monitoring of network traffic and activities.

good luck.
j