Who's watching the store?

Suggestions for WiGLE/JiGLE/DiGLE

31 posts • Page 1 of 3

Postby scruge » Mon Sep 12, 2005 10:44 pm

Some of us from the NS forums have noticed some very suspicious activity taken place in the NW Arkansas area.

We would like to know what you have in place to keep that type of activity to a minimum?

Postby uhtu » Mon Sep 12, 2005 10:49 pm

like crop circles?
when we spot known bad data we look at it.
when we're told specificly about known bad data we look at it.

generally we just let QoS work it out.

if you have something specific, please let us know.

Postby wrzwaldo » Mon Sep 12, 2005 11:06 pm

I guess the wildlife have started using WiFi. :shock:

http://www.churchofwifi.org/temp/bogus_aps.jpg

This looks to be just the tip of the iceberg.

Postby uhtu » Mon Sep 12, 2005 11:28 pm

heh.
that is definitely a candidate for investigation. curse those wascly wabbits!

that particular link dosen't help though :-)
we need information. lat/lon, mac addrs, etc.

Postby scruge » Tue Sep 13, 2005 12:03 am

heh.
that is definitely a candidate for investigation. curse those wascly wabbits!

that particular link dosen't help though :-)
we need information. lat/lon, mac addrs, etc.
The area in question is Fayetteville, Bentonville, and Ft. Smith Arkansas. Zoom in on any of the roads leading to those cities, in particular those just east of Fayetteville and you'll find the APs are spaced perfectly.

You'll find this behavior all over NW Arkansas.

Heck they have more APs than people.
I stumble a city of 4kk and never see what I'm seeing in that area of less than a 100k.

Postby uhtu » Tue Sep 13, 2005 12:21 am

we're looking into it. there's definitely something odd.
if any of you folks have got data posted from that area, and you could send along some of the affected Transaction-Id's (from your the Upload link) to wigle-admin[at]wigle.net or PM myself, bobzilla, or arkasha
we'd be much obliged.

need to find out if its a parser problem, or db problem or just a wayward client. so many delightful sources of error in this game.

Postby wrzwaldo » Tue Sep 13, 2005 1:25 am

we're looking into it. there's definitely something odd.
if any of you folks have got data posted from that area, and you could send along some of the affected Transaction-Id's (from your the Upload link) to wigle-admin[at]wigle.net or PM myself, bobzilla, or arkasha
we'd be much obliged.

need to find out if its a parser problem, or db problem or just a wayward client. so many delightful sources of error in this game.
Just by the location and how they follow roads/streets I'm putting my money on a wayward client. :wink:

Postby israel » Tue Sep 13, 2005 1:34 am

Just playing advocate here:

Has anyone actually wardriven the area to verify/deny any of these access points ? Unless that sat img is within the last 2 months it may be possible these networks may have a home.

Additionally it may be possible this behavior is occuring due to a wardriver logging data after covering an area both up and down the same road. Perhaps they are using a preamp?
[url=http://www.chroniclesofawardriver.org/]Chronicles of a Wardriver[/url]
[url=http://www.chroniclesofawardriver.org/][img]http://www.chroniclesofawardriver.org/chroniclesofawardriver.org_logthemall_letwiglemapthemout_anix400.gif[/img][/url]

Postby wrzwaldo » Tue Sep 13, 2005 1:56 am

Just playing advocate here:

Has anyone actually wardriven the area to verify/deny any of these access points ? Unless that sat img is within the last 2 months it may be possible these networks may have a home.

Additionally it may be possible this behavior is occuring due to a wardriver logging data after covering an area both up and down the same road. Perhaps they are using a preamp?
The image I posted is a game management area. I'd be willing to bet there are not that many (if any) homes out there (that's why I picked that area). But you are right someone should head over there and have a look see. There is also the little deal of no SSIDs on them (at least when you zoom in on the map).

http://www.agfc.state.ar.us/wma_lakes/w ... ounty.html

I'm going to have to say that there are no homes for any APs out there.

Postby israel » Tue Sep 13, 2005 3:08 am

I'm going to have to say that there are no homes for any APs out there.
I've noticed during some of my wardriving adventures through misguided farmlands here in california I get APs and nowhere in sight is something I would consider having an AP... All I see are tractors, water sprinklers, small sheds, trees. Usually when driving through these thought to be empty areas we get networks detected. We've never stopped to examine the situation but usually just give it the Whiskey Foxtrot Tango and keep going. This leads me to think that perhaps there are devices out there that are using WiFi somehow to keep track of things or communicate with one another. I've also noticed that these may contain blank SSIDs. Hope that helps.

Israel Torres
[url=http://www.chroniclesofawardriver.org/]Chronicles of a Wardriver[/url]
[url=http://www.chroniclesofawardriver.org/][img]http://www.chroniclesofawardriver.org/chroniclesofawardriver.org_logthemall_letwiglemapthemout_anix400.gif[/img][/url]

Postby wrzwaldo » Tue Sep 13, 2005 6:05 am

I'm going to have to say that there are no homes for any APs out there.
I've noticed during some of my wardriving adventures through misguided farmlands here in california I get APs and nowhere in sight is something I would consider having an AP... All I see are tractors, water sprinklers, small sheds, trees. Usually when driving through these thought to be empty areas we get networks detected. We've never stopped to examine the situation but usually just give it the Whiskey Foxtrot Tango and keep going. This leads me to think that perhaps there are devices out there that are using WiFi somehow to keep track of things or communicate with one another. I've also noticed that these may contain blank SSIDs. Hope that helps.

Israel Torres
I know of a couple farms that use 802.11b telemetry for their irrigation systems.

And these are the units they are using.

http://www.data-linc.com/fastlinc/fastlinc810e.htm

Postby scruge » Tue Sep 13, 2005 2:04 pm

If you load those areas into digle and then drop the Qos 1 notch, you'll find they all go away, except a small hand full in the urban areas and a dozen or less on the rural road.
Last edited by scruge on Tue Sep 13, 2005 4:48 pm, edited 1 time in total.

Postby scruge » Tue Sep 13, 2005 4:33 pm

Heres a link to more info regarding the questionable data in NW AR.

http://www.netstumbler.org/showpost.php ... tcount=926

Postby ccie4526 » Wed Sep 14, 2005 2:20 am

If you load those areas into digle and then drop the Qos 1 notch, you'll find they all go away, except a small hand full in the urban areas and a dozen or less on the rural road.
True, but unless we go back and resniff the same area a second time, most all the stuff that is found brand new will have a QoS level of 1 (assuming 1 is lowest). That's why I'm hoping Israel will eventually sniff through the areas that I ran through in Los Angeles, to raise the QoS level of them to something other than 1.

Postby israel » Wed Sep 14, 2005 5:12 am

That's why I'm hoping Israel will eventually sniff through the areas that I ran through in Los Angeles, to raise the QoS level of them to something other than 1.
L.A. is the place, I can't believe the plethora of APs there are there for the logging. I will eventually hit the areas you ran through... it's only a matter of time ;)

Israel
[url=http://www.chroniclesofawardriver.org/]Chronicles of a Wardriver[/url]
[url=http://www.chroniclesofawardriver.org/][img]http://www.chroniclesofawardriver.org/chroniclesofawardriver.org_logthemall_letwiglemapthemout_anix400.gif[/img][/url]

31 posts • Page 1 of 3

Return to “WiGLE Project Suggestions”

Who is online

Users browsing this forum: No registered users and 64 guests