Cain and Linksys Router

[nan0click]

Please forgive me if I post this in the wrong area.

I downloaded Cain and am trying to see if I can get it to work on my network. I am connected via WiFi to my Linkssy WRT54GS Router, and I am trying to Poison it and pick up my passwords as they are sent through the router. Unfortuantly, when I attempt to sniff for IP Addy's, nothing shows up even though they are in the correct range. I tried this on a computer at my church and they use a NetGear Router, so I am pretty sure its a setting on my router. Thank you for your help.

-={Nan0click}=-

[kurt_der_koenig]

Is there any traffic going on in your network?

I tried this on a computer at my church and they use a NetGear Router, so I am pretty sure its a setting on my router.

I don't think your god will be happy with you on that one!

-kurt

[nan0click]

Its not like I'm doing this for malicious reasons. Its a serious family reason (not joking) and so inbetween times I care about this person enough to get information about them I can play funny jokes on them.

Yes, there is traffic, I have WAN access, and I have network access. Its a PITA though because for some reason, I can never do anything like get remote registry or whatever with the cmd net use command. the command goes thorugh, but nothing happens. I THINK its router, but it might be some setting I have. I have WinXP Pro SP2 (necessary evil) and the two other computers have WinXP Home.

[Modderfokker]

This is basic networking,

Not all traffic can go over routers, some of these things include....

1. DHCP - unless the router is the DHCP server, DHCP request will not be forfilled on the other side of the network.

2. Any kind of broadcast - etc net send

This could well be the problem, and it is fixable. But it depends on whether wireless routers support this function or whether you can install the function into the linksys WRT54G, you can get a firmware update for it but im not sure if it will help


doyle

[zENGER]

Originally posted here by Modderfokker
This is basic networking,

Not all traffic can go over routers, some of these things include....

1. DHCP - unless the router is the DHCP server, DHCP request will not be forfilled on the other side of the network.

2. Any kind of broadcast - etc net send

This could well be the problem, and it is fixable. But it depends on whether wireless routers support this function or whether you can install the function into the linksys WRT54G, you can get a firmware update for it but im not sure if it will help


doyle

If he's connected to a linksys router then he's in the same broadcast domain and should see any broadcast data even without poisoning it. Net send doesn't really have anything to do with being a broadcast, except in the terms of a MS domain. It rides in a TCP protocol I believe.

What he is trying to do is to poison the arp cache (or atleast what I gather), which doesn't really have anything to do with broadcasts. I'm not sure why this doesn't work, but I would venture to guess that since most traffic is destined to the WAN port, that the internal switch cannot have that IP/MAC poisened, being that its part of the same unit.

[phishphreek]

I'm unsure why you can't get it to work. I'm able to get it to work on my linksys wrt54g connected via wireless... I'm able to poision/sniff with no problems at all. Are you sure you are doing it properly? I know its an easy tool.. but do you have the correct interface/device chosen?

[nan0click]

I selected the device in Cain Config with my appropriate IP address, my ethernet port is disabled too. Based on what the people over at Jinx said, the router is not a switch. I am unsure how to make the router a "switch." Also, maybe this problem stems from WinPcap, not my router. I have the newest version installed, and I am not what, if any, kind of configuration should be done.

I am also using port fowarding, and that might affect it. I am really stumped.

Thanks for the replies,
nan0click

[zENGER]

Right from Linksys's site on the model you mentioned

Internet-sharing Router, 4-port Switch, and performance enhanced Wireless-G (802.11g) Access Point

The 4 ports together are a switch, and the WAN port goes through the router. Who is this jinx group and what did they think it was since they said it wasn't a switch?

[nan0click]

I wondered that as well, I googled it like a good person, and found it is a switch. I just felt it is aways good to post what I am told accross forums that way everyone is on the same track.

[Irongeek]

This may help:

http://www.irongeek.com/i.php?page=videos/cain1