Jump to content

How To Receive Notifications When New Devices Join Network


heavy_fries
 Share

Recommended Posts

Hi,

I'm searching for a windows or linux program that I can run while I'm connected to a network (wired or wireless, doesn't matter) that will automatically notify me (for example, play a sound) when a computer or ipad or other device is powered on and connects to the network.

I hate having to connect to a network and then wait...... and wait...... and wait...... for someone to turn on a computer or ipad and then connect to the network.

I also hate having to click a refresh button or repeating the same commands over and over.

There has to be a better way.

I have an ip address on the network and I know the ip range.

I need something that will continuously monitor the network and notify me when any other device with another ip address is also connected to the same network.

It's hard to test out "pen testing" software when there are no other computers on the network.

Any suggestions?

Link to comment
Share on other sites

You could use Nmap to do a scan throughout the network, to determine if there are any hosts alive prior to pen-testing.

Or if you are on wireless network you could set your wireless card to monitor mode and use airmon-ng to monitor the traffic, any client that connects to your AP will be displayed on your screen.

On a wired network, you would set your wired card to promiscuous mode and use Wireshark to capture the LAN traffic. And if anyone connects to the network, you will be to see their IP addresses.

Edited by Infiltrator
Link to comment
Share on other sites

If your network equipment handles SNMP, you could probably setup a trap that does an alert when an event happens, but I think an arp sweep or even nmap scan would be easy enough to automate with some scripting. Just set everything to run on a schedule and dump the output to a file, then have another script parse it out for addresses and compare to a previous scan. If number of addresses increases, send of an alert, email, or play a sound file. All the scripting of course would be on your end to figure out, but I'm sure it could be done.

Link to comment
Share on other sites

I made a little script that uses fing to detect new devices on my network. It compares them with a predefined list of mac-adresses and gives an alert any time a new device is discovered. Then it sends out a push-message to my iPhone via Prowl. Works like a charm.

/F

Link to comment
Share on other sites

Its not much of a script but here it goes...

Main script:

#!/bin/bash
net=192.168.1.0/24
known=knownmac.txt

IFS="
"
for l in `fing -n $net -r 1 -o table,csv --silent`
do 
        IFS=";"
        array=($l)            
        cat knownmac.txt|grep ${array[5]}
        if [ `cat $known|grep ${array[5]}|wc -l` -eq "0" ] 
            then
               echo "${array[5]} is not known!"
           ./prowl.sh 0 "Mac Alert!" "New Mac ${array[5]}" > /dev/null
            fi   

        IFS="
        " 
done

Not a finished script but it works. You have to have fing installed (http://www.over-look.com/site/index.php/download) and modify the paths so they are correct for you. Also get the PROWL-app for your phone and get an apikey from prowlapp.com. the textfile knownmac.txt is just a plain textfile with all my devices known mac-adresses in. One per line.

AA:BB:CC:DD:EE:FF My first device
AB:BC:CD:DE:EF:FA My second device
and so on...

Prowl.sh script

#! /bin/sh
# Script by FLX: http://flx.me
# Requirements: curl
# Usage: ./prowl.sh priority(-2 to 2) appname description
# Example: ./prowl.sh 0 "linux" "this is a test"
app="Prowl 4 Linux"
priority=$1
eventname=$2
description=$3
apikey=prowlapikeyhere

if [ $# -ne 3 ]; then
echo "Prowl 4 Linux"
echo "Usage: ./prowl.sh priority(-2 to 2) appname description"
echo 'Example: ./prowl.sh 0 "linux" "this is a test"'
else
curl https://prowl.weks.net/publicapi/add -F apikey=$apikey -F priority=$priority -F application="$app" -F event="$eventname" -F description="$description"

Edited by zyrax
Link to comment
Share on other sites

I'm wondering if there is a way to do this from the routers firmware. All of these methods are good and would work well but you need to have a active machine on the network running continuous scans to get real time updates. However if you could somehow implement it into some open source firmware on a router then you get round the clock notifications without the use of another machine besides the router.

In theory you could write a script like the one from Zyrax and use it to monitor the DHCP server IP address pool and everytime a new device joins the network, the script would send out a notification containing information such as, IP address, MAC address and so forth.

Link to comment
Share on other sites

  • 3 weeks later...

For windows try this tool out from Nirsoft.net

http://www.nirsoft.net/utils/wireless_network_watcher.html

and for linux

Autoscan has an option called "Intrusion Alert" that alarms you of any new devices that add them selves to your network. It's on the top of the menu in the GUI with a computer Icon and a cable coming out of it..

hope this helps you out : )

post-38510-0-11148800-1326904541_thumb.g

post-38510-0-97809000-1326904645_thumb.p

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...