NSSpyglass
NetStumbler Detection Software for Windows Detecting NetStumbler's via a Linksys Access Point

How to setup NSSpyglass

1)  You must have a Supported LinkSys Access Point (check the list of supported devices)

2)  You must have a computer with a supported Wireless 802.11b card.  If NetStumber works with your card then NSSpyglass should work with your card.  (check the list of supported cards)

3)  The computer that is going to be running NSSpyglass must be associated with the Linksys Access Point. What this means is the computer must have it's wireless client SSID set to the same SSID as the Linksys Access Point.  (Setting the SSID on the NSSpyglass computer to:   ANY    has also worked in LAB testing.)

4)  You must have the WinPcap Library installed.  If you are running Ethereal (the free sniffer software) then you already have this, if not you can download it from http://winpcap.polito.it/. The direct download is here: http://winpcap.polito.it/install/bin/WinPcap_2_3.exe

5)  Download NSSpyglass and install it.

6)  Edit the file NSSpyglass.ini and change the first line to the MAC address of the Access Point that you are associated with.  You must do this without spaces, colons or typos.  If you don't enter the MAC address correctly, you may get false or multiple alerts.

7)  Start NSSpyglass.  As long as you have the above installed you shouldn't get any errors.

NSSpyglass is installed, now what?

1)  When NSSpyglass starts, select your network card from the list.

2)  Click OK to continue

3)  Verify your Access Point's MAC address is correct

4)  Click the START button and sit back and wait... or start NetStumber on a different computer and see what happens.

5)  NSSpyglass will detect NetStumber activity and also show DHCP requests by wireless devices.

Note:  If you run NetStumbler from the same computer NSSpyglass is running on, you will most likely need to reboot that machine to get NSSpyglass detecting properly again.  Running NetStumbler from the NSSpyglass machine will not work.

At least a display resolution of 800 x 600 is highly recommended.

Have fun...

Example NSSpyglass.ini file (12 lines total)  required for versions ABOVE 0.9.5.

Example NSSpyglass.ini file

0402011110BB Access Point MAC Address (No colons and No spaces)
C:\windows\calc.exe
0
5
C:\windows\notepad.exe
0
1 Save to log file
1 Show site monitor activity on list
0 Play WAV on site monitor activity
1 Show DHCP Requests on list
0 Play WAV on DHCP requests
1 Show IP assignments on list
Line 1:  Associated Access Point's MAC Address
Line 2:  Full path and filename for application #1 - Leave this even if you don't use it
Line 3:  0 = Don't Launch Application#1   1 = Launch Application#1 on a NetStumbler Detection
Line 4:  Delay in MINUTES before Application #2 is launched - Leave this even if you don't use it
Line 5:  Full path and filename for application #2 - Leave this even if you don't use it
Line 6:  0 = Don't Launch Application#2   1 = Launch Application#2 after above time delay
Line 7:  1 = Save hits to NSSpyglassLog.txt   0 = Don't write hits to log file.
Line 8:  1 = Show site monitor activity on the list 0 = Don't show site monitor activity
Line 9:  1 = Play a WAV file for site monitor activity 0 = Don't play WAV for SMA
Line 10: 1 = Show DHCP requests on the list 0 = Don't show DHCP requests on the list
Line 11: 1 = Play a WAV file for DHCP requests 0 = Don't play WAV for DHCP requests
Line 12: 1 = Show IP assignments on list 0 = Don't show IP assignments on list