this post was submitted on 11 Oct 2023
13 points (100.0% liked)
networking
2803 readers
1 users here now
Community for discussing enterprise networks and the ensuing chaos that comes after inheriting or building one.
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Honestly, though it may be overkill, go get kismet.
It’s going to require some minor configuration, and there is no iOS support for sure - but if you’re going through the effort of investigating and need data - this will serve you, and set you up with skills for future investigations.
You may require a usb wifi dongle, depending on what support for your mac’s wifi card is like. Look for one that is known to work. Hoping it’s a macbook!
I have personally used kismet to prove that a device was too far away from an AP because it shows which packets were retransmissions, and can correlate that with signal strength of both device and AP over time.
Also, I was able to prove that a bank’s CFO was getting dropped zoom calls because he’d joined two separate SSIDs on different and very locked down networks (broadcast from the same APs, and kept roaming between both of them every time he went for a coffee or to the meeting room
It’ll definitely do what you need, and I’m happy to assist if needed - though my mac skills stop in 2019.
Ps. Most of the iOS options suck, because of how locked down the wifi stack is. Basically everything is a worse, subscription-model, glorified version of speedtest.net
Pps. Kismet is designed to be both client and server - i.e. it’s capable of being a wireless probe and a data collection point for other probes. You can just use it stand alone and display the data you captured locally.
If you need simultanious data capture from multiple points for correlation, I’d suggest another laptop or raspberry pi - but because it takes over the interface in monitor mode when it’s running, you can’t also use it to be your network link.
This looks like it could be a good option, thanks for the info.