views:

282

answers:

8

This is more a thought experiment than anything.

I'm wondering what it would take to detect everything I legally can about the laptops in a hotspot. My first thought was to grab every MAC address I can and extract the maker from the first 24bit.

The question is would this be illegal and what else could I legally scavenge, preferably passively?

P.S. This constitutes a pattern-recognition problem so it IS programming... I think.

+1  A: 

For the brain dead answer: Quit typing and look around for a few minutes :-D

BCS
+2  A: 

nmap can do a reasonable job of guessing the operating system by the way the target system responds to various probes

Paul Dixon
not passive but I don't /want/ to be strict on that.
BCS
A: 

IIRC there are ways to detect what TCP/IP stack is being used by sniffing choices in port usage and sequence numbers.

BCS
A: 

I guess the obvious one would be to sniff the user-agent out of their HTTP requests.

:) ...Anyone known the legality of looking at packet payloads on a public hot-spot?
BCS
Depends on the country, I guess. In the US you could probably get sent to Guantanamo just for looking at MAC addresses.
Instead of scanning the local network, you propose to run MIM attacks? =)
Till
@Till That would only be needed for SSL, it nothing is encrypted you could get anything you want by sniffing packets.
BCS
A: 

Why does it matter, 90% of them will be apples ;-)

FlySwat
50% within 40ft of me right now :b
BCS
But what version of OSX? What clients? what models?
BCS
A: 

GFI Languard gives a lot of info like this. Check it out.

Geoffrey Chetwood
A: 

The people wearing black turtle necks will be using Macs, the rest will be using PC's and Windows (except for that one guy with long pony tail who is using Linux).

Craig
The only mac in sight right now came in with an owner in a leather jacket and an Iron Madden shirt.
BCS
Is Iron Madden related to John Madden?
Craig
A: 

Packet sniffing is illegal without the network owners consent. At least that's the generally followed precedent. There has been very few tests of this in court. But your idea of how to do it, using the mac addresses, would work well. Wireshark is a good packet sniffer if you're looking.

cblades
IIRC and INAL, there is something about if you look at the payload that effects the legality. At least in some places.
BCS