This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hiding in plain sight… what my teenager is doing?

0

My teenager has discovered a way to circumvent my netgear wndr4500 router logging. Any ideas on how to shine a light on these activities?

asked 13 Nov '14, 07:24

TonyBromo's gravatar image

TonyBromo
11113
accept rate: 0%

1

Any ideas on how to shine a light on these activities?

maybe ask your teenager for help? Apparently he/she is pretty smart ;-)

(13 Nov '14, 12:51) Kurt Knochner ♦

Kurt: He is very smart... Which is why I am not taking anything for granted! :-)

(13 Nov '14, 13:40) TonyBromo

2 Answers:

0

What exactly do you mean when you say 'Circumvent'? Did (s)he just disable logging?

It sounds like you can log into your router and find your way around pretty well, so I'd say go take a look at logging and see if 1) it is enabled, 2) If there is a rule or something set up that would allow your kid's computer to get around it.

If neither of those looks to be the case, you could just wait until a time you know he is using the network and throw up wireshark and take a look at it. Filter on his MAC address.

answered 13 Nov '14, 10:37

Jibbs9's gravatar image

Jibbs9
11
accept rate: 0%

Thanks Jibbs9, logging is enabled on the router, it's just his activity appears to be missing from the logs... He does not have the password to the router and it stays locked in my office. What seems weird is that his activity was there just a few days ago, plus I have not made any router changes. He and I have talked, he doesn't seem to be using a VPN client to get around the home firewall/logging. I use my work PC on my home network (which also uses a VPN client) and I don't see any activity for that unit in the logs - which led me to the hypothesis that he was possibly using a VPN (he uses to get around the school firewall). Tonight I am going to try to reset my router to its defaults and review this for a few days.

(13 Nov '14, 13:38) TonyBromo

Did you check the client connection history on your router? (i.e. the list of everything that has been connected to your network recently). Is he connected to it and you just arent seeing the traffic? If thats the case, then I'd re-ask him about the VPN. If not, do you live in close proximity to any neighbors? Could he be using someone else's wifi?

(13 Nov '14, 13:51) Jibbs9

0

Kurt: He is very smart... Which is why I am not taking anything for granted! :-)

Maybe he is "recycling" (using) your IP address and/or mac address (you can change that easily while running Linux) and you are simply not recognizing his traffic in the logs ;-)

Regards
Kurt

answered 13 Nov '14, 13:49

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%