Jump to content

Library to track wi-fi sources (cell phones) (wardrive reversed)


Kapiau
 Share

Recommended Posts

Hello all,

I've been looking for a way to setup a few wifi antenas in listening mode, capture "events" with Kismet then compile the information to give me with some idea of how many wifi devices were in the area as well as have some indication of their locations.

To to that I expect the algorithm to do pretty much the reverse of a Wardrive. I imanine 3 or more wifi devices in listening mode. Each one of them with a GPS location. They would, using Kismet, log MAC addresses, with power level and time stamp. An algorithm would get the 3 GPS locations, get each of the MAC addresses, try to match time stamps and interpolate/triangulate positions. I've seen results of such algorithms that track crowds as well as individuals. However, I haven't been able to find a library that does that.

I hope there are some knowledgeable folks out there who know where should I be looking.

Link to comment
Share on other sites

Well, there first was this discussion here but it went off in a different direction. It should provide you with some insight at least. After that you're pretty much on your own as I don't believe any library currently exists that does what you want. So the question now becomes: how capable do you think you are to make such an idea work?

Link to comment
Share on other sites

Hallo Cooper,
Thank you very much for your reply. I saw how you and toughbunny discussed hard on the topic and indeed it drifted a bit as you were doing for the sake of the experirment. In my case, I have a more specific question and I know it is pretty straight forward.

Additionally, based on my research on the topic, I would be really surprised if nobody ever built anything like that.

Thus it is, in my opinion, not a matter of capability, but of knowledge of projects and technologies. I'm trying really hard to avoid reinventing the wheel and hope to find some folks who know the tricks to get the job done!

Link to comment
Share on other sites

You can only log your own GPS info obviously. It's how Wigle (or whatever it's called) does its thing. The point is to try and triangulate somehow where the transmitter is located without relying on it to tell you (as you can't trust it to be truthful even if it did tell you, which it doesn't).

Link to comment
Share on other sites

You can only log your own GPS info obviously. It's how Wigle (or whatever it's called) does its thing. The point is to try and triangulate somehow where the transmitter is located without relying on it to tell you (as you can't trust it to be truthful even if it did tell you, which it doesn't).

Pretty sure kismet drones can log their gps coordinates. The biggest problem is going to be timing. The clocks on your wireless location devices have to be synchronized, and very accurate. If the timing is off, then the location from the triangulation is going to be off. That's usually part of why commercial systems cost so damn much.

Link to comment
Share on other sites

Yes, synchronization would be ideal. However, keep in mind this is to identify people with phones in their pockets walking on a sidewalk. From the GPS signal of my 3+ locations I'll get also accurate timing. By getting power readings that are "close" I expect to have some error indeed, but that should be well within the accuracy of the power readings anyway.

Having that said, this discussion seems to slowly confirm my fears that there is no ready solution for my problem. Is that so?

Link to comment
Share on other sites

Hello all,

I've been looking for a way to setup a few wifi antenas in listening mode, capture "events" with Kismet then compile the information to give me with some idea of how many wifi devices were in the area as well as have some indication of their locations.

To to that I expect the algorithm to do pretty much the reverse of a Wardrive. I imanine 3 or more wifi devices in listening mode. Each one of them with a GPS location. They would, using Kismet, log MAC addresses, with power level and time stamp. An algorithm would get the 3 GPS locations, get each of the MAC addresses, try to match time stamps and interpolate/triangulate positions. I've seen results of such algorithms that track crowds as well as individuals. However, I haven't been able to find a library that does that.

I hope there are some knowledgeable folks out there who know where should I be looking.

well I'm not really sure if what I'm about to suggest is even possible but you could set up 3 or 4 war-drive (war-camping?) stations and workout a person's location from the overlap. You wouldn't be able to tie them directly to a GPS location but you might be able to get an approximation.

I made a pretty picture:

war-camping.png

Like I said no GPS coords and there would be blind spots for sure. You may have to calibrate the areas where coverage overlaps by physically walking the target areas and tracking yourself. Even then, you may not have very accurate readings.

I think you could probably figure something out, it would just take a lot of time, money and effort. Or I could be completely wrong - I honestly don't know.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...