NSSpyglass FAQ (Frequently Asked Questions)

 

Q:  Why would you release such a program?

A:  A survey was given to the NetStumbler community and EVERYONE that responded said "Release it!", so here it is.  It is a handy tool to add to your Intrusion Detection arsenal to help alert you to possible "questionable" activity getting ready to take place such as attempted access to your network.  NSSpyglass shouldn't be the only Intrusion Detection software that you use, it should be one of many that you use. 

Q:  NSSpyglass detects NetStumbler but when I run NetStumbler again NSSpyglass doesn't detect it.

A:  Once a MAC Address is detected as running NetStumbler, NSSpyglass won't detect any more NetStumbler hits from that MAC address.  If you want to test it again from that same MAC Address then Stop and Exit the NSSpyglass program and re-run the NSSpyglass program or click the CLEAR LIST button.  NetStumbler can't be run from the same computer that NSSpyglass is running on to test NSSpyglass. 

Note:  This might not be the case with Orinoco RG-1000 Access Points as reported by Grey Wolf.

Q:  NSSpyglass detects NetStumbler but when I run NetStumbler again the MAC address doesn't show up.

A:  Once a MAC Address is detected as running NetStumbler, NSSpyglass won't detect any more NetStumbler hits from that MAC address.  If you want to test it again from that same MAC Address then Stop and Exit the NSSpyglass program and re-run the NSSpyglass program or click the CLEAR LIST button.  NetStumbler can't be run from the same computer that NSSpyglass is running on to test NSSpyglass. 

Q:  I have my NSSpyglass installed but when I run NetStumbler, NSSpyglass doesn't detect it.

A:  You can't run NetStumbler on the same machine that NSSpyglass in running on.  Test NSSpyglass with another machine, laptop or PocketPC. If you did run NetStumbler on the NSSpyglass machine, reboot that machine to ensure NSSpyglass will detect future NetStumbler hits.

A:  Your Access Point isn't supported? Check the Supported Equipment list.

A:  It's an association thing?  Read the answer to the next question: Linksys monitoring the Cisco wireless network.

A:  You have turned off the option in NetStumbler  "Get AP Names"/"Query AP for Names"

Q:  I have my Linksys Access Point setup now to tell me when someone stumbles by my Cisco AP wireless network but when I run NetStumbler on my laptop, NSSpyglass doesn't detect it.

A:  If you changed the association of the client manager on the machine that NSSpyglass is running on there is chance that NSSpyglass won't detect NetStumbler but will still detect DHCP requests.  (Example:  You have a Cisco network with SSID: tsunami and now you setup a Linksys router (SSID=StumblerMon or whatever) to monitor for Stumblers, and you change the association on the NSSpyglass machine from tsunami to StumblerMon and don't reboot.  Here is the fix.  Make sure the NSSpyglass PC is now associated with the same SSID as the Linksys Access Point.  Shut down the NSSpyglass machine (ie: Power it off).  Start the NSSpyglass machine and let it boot up.  Make sure you are now associated with the Linksys AP (you can check this in the wireless client manager or usually the wireless icon in the system tray).  Verify you are talking with the Linksys Access Point by bringing up the Linksys WEB setup page (You don't have to login, just verify the Linksys logon challenge comes up) usually found at:   http://192.168.1.1  Start NSSpyglass and test it by running NetStumbler on a different machine, laptop or PocketPC.

Q:  I have a D-link Wireless Access Point, however my neighbor has a Linksys Access Point.  Can I detect NetStumblers via his Linksys Access Point.

A:  Yes... but... Make sure you have your neighbors permission to associate with his Access Point.  Now, lets say you talked to your neighbor and he's OK with you associating with his Access Point.  In order for this to work your neighbor can't be running WEP on his Access Point... probably another thing to verify with your neighbor... does he know he is running an open AP?  If he is aware of this, then you're all set.

Q:  I have a Linksys Access Point model blah...blah...blah...  Will NSSpyglass work with my Access Point?  Check the Compatibility List and if it's not there... then...

A:  That's a really good question.  Please download NSSpyglass and follow the setup instructions on the setup page and then send me an e-mail and let me know if it worked!  Most likely NSS will detect DHCP requests but the big question will be if it detects NetStumbler.

Q:  I run my Site Monitor software and NSSpyglass doesn't detect it? Why not?

A:  Site Monitor activity was an added bonus/feature/etc.  NSSpyglass does NOT detect ALL Site Monitor activity, it only reports certain scenarios that it considers to match site monitor type activity.  For example Cisco site monitor activity will not show up in NSSpyglass.  I wouldn't worry too much about it.

Q:  Can I record my own sounds for NSSpyglass?

A:  YES!  Just make sure you keep the WAV file names the same as the original, other than that, make them whatever you want.  NetStumbler = NetStumblerDet.wav,  Site Monitor Activity = sitemonitor.wav and DHCP Requests = DHCPdet.wav.

Q:  How much does NSSpyglass cost?  Is it shareware?

A:  NSSpyglass is beggarware.  Beggarware asks that you make a donation to help continue development of the program and others like it.  If you like the program and use it to assist you in intrusion detection you are encouraged to make a donation.  The program uses some DLLs that needed to be purchased and there are hundreds of development hours involved in the program, beggarware was the most logical release method.