• November 01, 2024, 12:44:15 PM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: Logging/sniffing question?  (Read 7060 times)

BobHoward

  • Level 1 Member
  • *
  • Posts: 5
Logging/sniffing question?
« on: December 08, 2013, 02:34:33 PM »

Hi,

This is a weird situation, but here it is: I have an iphone 4s with a social game app installed.  I registered a new account in the app, and I've been using it for a week or so.  I just updated the app, and it sort of half logged me out.  I still receive game and message notifications, so I know the app is authenticating me enough to communicate with the iphone's notification center.  However, when I open the app, it prompts me to log in.  The problem is, I don't remember what e-mail address I used to register, so I can't log in!! I'm sure I know my password, but I don't know the username/e-mail address.  (Stupid, I know.)

I've contacted the app vendor for help, but I'm not expecting much assistance.  It occurs to me, though, that maybe that username/e-mail address is still being transmitted on my wifi network as those notifications come in.  Is there any way I can capture that from the DIR-655 logs?  Or capture it via a wifi sniffer somehow?

Thanks in advance!
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Logging/sniffing question?
« Reply #1 on: December 08, 2013, 06:34:29 PM »

No...That would not be a good thing if you could sniff data across the Wifi and would be a security violation. You'll need to ask the app vendor if there is a way you can recover the account info with them. Maybe create a new account with them using a new email address.

Good Luck.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

BobHoward

  • Level 1 Member
  • *
  • Posts: 5
Re: Logging/sniffing question?
« Reply #2 on: December 10, 2013, 09:40:04 AM »

Thanks for the reply.  However, it's not a security violation since I'm referring to my own home wifi network.  I have full admin access, of course, and can log or sniff whatever is necessary.  I'm just trying to determine if this e-mail address is something I'd be able to discover in the logs or from a network trace.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Logging/sniffing question?
« Reply #3 on: December 10, 2013, 10:50:51 AM »

I don't believe the logs capture any email addresses and sniffing might depend on how the data is handled, encrypted some how or only used and detected with in the App. The router is just a transport mechanism. I don't think that kind of data could be sniffed like that.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

BobHoward

  • Level 1 Member
  • *
  • Posts: 5
Re: Logging/sniffing question?
« Reply #4 on: December 10, 2013, 11:45:57 AM »

I suspect you're right.  If anyone has other ideas/info, let me know.  Thanks for the help!
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Logging/sniffing question?
« Reply #5 on: December 10, 2013, 11:48:38 AM »

I'd contact the Mfr of the App and ask them if this is a concern for you and if there is any help from them. Good Luck.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

PacketTracer

  • Level 4 Member
  • ****
  • Posts: 441
Re: Logging/sniffing question?
« Reply #6 on: December 11, 2013, 09:00:26 AM »

  • (1) Airpcap + Wireshark --> you see any traffic inside your WLAN
  • (2) Connect your DIR-655 to a modem that has a function for packet tracing --> you see all data transmitted between your DIR-655 and your ISP
  • (3) Within your DIR-655 switch WLAN off and connect your mobile device via a combination of an access point and a switch to your DIR-655. The switch should support port mirroring: Configure a mirror port for the port the access point is connected to --> With a sniffer connected to the mirror port you can see all data tansferred between your mobile device and your DIR-655
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Logging/sniffing question?
« Reply #7 on: December 11, 2013, 09:12:57 AM »

Airpcap have a demo or trial version?  ???
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

PacketTracer

  • Level 4 Member
  • ****
  • Posts: 441
Re: Logging/sniffing question?
« Reply #8 on: December 11, 2013, 12:14:55 PM »

Quote
Airpcap have a demo or trial version? ???

Well, it's special hardware, see for example here. The cheapest version costs 165 EUR and it only supports b/g. So it's best to know a friend who has one ...
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Logging/sniffing question?
« Reply #9 on: December 11, 2013, 12:25:06 PM »

I see, very interesting...
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.