Skip to main content
Information Security

Return to Answer

added 287 characters in body
Source Link
Luc
Luc
  • 33.2k
  • 8
  • 81
  • 140

There are several ways to view who's on your network, some easier/less technical than others:

  • The logging feature in your router;
  • Sometimes you can view currently connected devices. For example in a FritzBox you can see all devices that have a dhcp lease (i.e. which got an IP address) on the "Home Network" page.
  • You could scan the network from your laptop using a tool like Zenmap (or Nmap on the command line).
  • A bit more advanced, but you can also put your WiFi card in monitor mode and look for devices that communicate with your access point. Wireshark and airmon-ng are the tools I would use, but there may be better options.
  • If you have shell access to your router, you could use netstat or even tcpdump to view connections and traffic.
  • You could turn off DHCP on your router and enable it on your laptop, so that you can easily see who is trying to get a lease.
  • Using Wireshark you can see broadcasts on the network. Almost every device broadcasts something from time to time so if your access point works as a switch (i.e. if wireless clients can reach each other on layer 2 (ethernet)) you can pretty easily enumerate all active MAC addresses.

There are several ways to view who's on your network, some easier/less technical than others:

  • The logging feature in your router;
  • Sometimes you can view currently connected devices. For example in a FritzBox you can see all devices that have a dhcp lease (i.e. which got an IP address) on the "Home Network" page.
  • You could scan the network from your laptop using a tool like Zenmap (or Nmap on the command line).
  • A bit more advanced, but you can also put your WiFi card in monitor mode and look for devices that communicate with your access point. Wireshark and airmon-ng are the tools I would use, but there may be better options.
  • If you have shell access to your router, you could use netstat or even tcpdump to view connections and traffic.
  • You could turn off DHCP on your router and enable it on your laptop, so that you can easily see who is trying to get a lease.

There are several ways to view who's on your network, some easier/less technical than others:

  • The logging feature in your router;
  • Sometimes you can view currently connected devices. For example in a FritzBox you can see all devices that have a dhcp lease (i.e. which got an IP address) on the "Home Network" page.
  • You could scan the network from your laptop using a tool like Zenmap (or Nmap on the command line).
  • A bit more advanced, but you can also put your WiFi card in monitor mode and look for devices that communicate with your access point. Wireshark and airmon-ng are the tools I would use, but there may be better options.
  • If you have shell access to your router, you could use netstat or even tcpdump to view connections and traffic.
  • You could turn off DHCP on your router and enable it on your laptop, so that you can easily see who is trying to get a lease.
  • Using Wireshark you can see broadcasts on the network. Almost every device broadcasts something from time to time so if your access point works as a switch (i.e. if wireless clients can reach each other on layer 2 (ethernet)) you can pretty easily enumerate all active MAC addresses.
Source Link
Luc
Luc
  • 33.2k
  • 8
  • 81
  • 140

There are several ways to view who's on your network, some easier/less technical than others:

  • The logging feature in your router;
  • Sometimes you can view currently connected devices. For example in a FritzBox you can see all devices that have a dhcp lease (i.e. which got an IP address) on the "Home Network" page.
  • You could scan the network from your laptop using a tool like Zenmap (or Nmap on the command line).
  • A bit more advanced, but you can also put your WiFi card in monitor mode and look for devices that communicate with your access point. Wireshark and airmon-ng are the tools I would use, but there may be better options.
  • If you have shell access to your router, you could use netstat or even tcpdump to view connections and traffic.
  • You could turn off DHCP on your router and enable it on your laptop, so that you can easily see who is trying to get a lease.