Database Info

[APP]Pixie Network Monitor (Wireshark/Kismet for Android)

So... I'm rather new here and I'm not 100% sure that this is the correct forum to post this in (since I know it says "xda developed apps/games only"). However, I have seen commercial Android apps discussed here before... so... *shrug*.
Let me first say that I am not the developer... I just think this app should get some attention.
Pixie Network Monitor by 9bitlabs (would post a link but my account is restricted. ;-) )
It is a network monitoring app similar to Wireshark, but for Android. It is $4.99 on the Android market, it requires root, and it does not work on all phones (since not all phones can have their wifi put into promiscuous mode). There is a companion app called "Pixie Probe" available on the market for free. Pixie Probe will determine whether or not your phone is compatible with Pixie.
I have tested it out on my Evo (running CM6.1 RC1) and it seems to work amazingly well.
Pixie does not contain all of the features of Wireshark/Kismet. This is from the Pixie FAQ:
Q: What's the difference between Pixie and a desktop tool like Kismet?
A: The biggest difference between the tools lies in how they interface with the network. Kismet interacts directly with the wireless adapter and places it in monitor mode, allowing it to hear any packet over the wifi, even if it is not associated with a network. This can be problematic with some hardware, but many of the newer wifi chipsets work great with Kismet.
Pixie, on the other hand, is constrained by Android. Rather than expose the wifi adapter as an 802.11b device, Android actually hides all of that functionality: the wifi connection actually appears to system processes as a plain old Ethernet device. This means that we don't get monitor mode and we also don't get to see wifi-specific data, such as beacons and associate/disassociate packets.
On the plus side, Pixie runs in your pocket and that's harder to do with Kismet, unless you have very large pockets. Pixie is also significantly easier to set up for folks without Linux experience.
Click to expand...
Click to collapse
The Pixie website gives very detailed information about the app, so I suggest you go there if you want more info.
In any case, I hope other people find it useful.

[Q] Changing IP Address

I wanted to know if there is a way to set from what area your IP shows up as when you connect to the internet on your Android phone?
For instance, I have a T-mobile G2 and when I connect speedtest.net or an IP finding website, it shows the location of my IP address. Usually its close, sometimes its far away.
Is there any way to choose a static IP or range of IP's to narrow down where my IP is located? i.e. can I choose to spoof my IP to show me in another state? I'm rooted running CM6.1 so I'm down for things that need root access.
Thanks in advance for info/help. I'm gonna continue to research this as well.

Its going to show the location where the IP should be.
maxmind.com is a good lookup to see where the IP should be coming from. (background- they are designed for charging websites, your IP says you are in Nigeria, or Flordia, or wherever, but you are having your order shipped to Washington, so we need to check for fraud more carefully, or hulu and not allowing to be viewed outside US - but same applies to any country)
Especially on celluar, its going to depend on the cell network, your phone likely is behind their NAT. If the NAT is in the same city you are, its going to be really close.
Example Rogers in Canada has 2 cities as far as I can tell with equipment in Montreal and Toronto (when I was getting external DHCP addresses it was one of these 2 cities) Now that I have a static external address, I allways show as Montreal even when I'm on the West-Coast. When using the NATted addresses (10.x.x.x) it would allways show as Toronto (or Greater Toronto area) might have been Markham.
To spoof your IP to show you're in another state, I believe Giganews offers a VPN that will be comptable with just about everything, west coast US, east coast US, one in Asia and one in Europe.
This is going off memory, if I'm found incorrect, I'll edit the post.
Kevin

Thanks for the information. Makes a lot of sense. Now I just gotta figure out the proper way to set up the VPN on my phone. I've got to the VPN settings, I've just gotta figure out the proper setup
So basically the VPN settings on Android can accept any VPN address/info that I am signed up for? I don't really know if I wanna pay for a VPN and I know there are free alternatives, especially considering that I dont need any more services than what a free one offers.

Any and all of the free ones I've seen, are designed for computers, PC or Mac, they require software installed.
The reason I mentioned the Giganews VPN service, was because it is the PPTP standard vpn connection, so supported without a software application.
I am interested if you know of free ones that offer this.
Additionally, you also have to check to see if your provider blocks VPN connections on your phone. Rogers does unless you pay extra for a non-NATted IP. So its a trial and error. I know a few providers in the US have a VPN APN, which is designed for people using VPN services. I don't know which block VPN connections by default.
It should be compatible with PPTP and IPSEC VPN services.

Ok so I figured I would post my question here as this thread is already created and has keywords that pertain to my question/problem
Now I provide support for several end users and I need VPN access to their network/machine at a glance for the type of support I provide. I was thinking of something along the lines of something software based that would allow me to access their network (shared files mostly) but I cant think of anything that I can setup one time and not have to worry when they take the laptop/desktop home and their IP address changes or if their firewall is not properly configured.
Any solutions to this particular problem?
I was thinking of something Hamachi like but I do not need remote access I just need file sharing access and network access...

I know that Windows 7 and Server 2008r2 have a dial-less VPN that can be setup, the computer will connect to your VPN service, anytime it is on, and you would be able to share the files that way.
Or users dial the VPN whenever they log in, but that would stop you from connecting remotely after a reboot.
Ideally, they should be connecting to your server, and saving all their files there?
Not enough infomation to actually give you any other ideas, can PM me with what hardware and software you have to work with, mobile devices or not, ect.

Free your data: running your own server (post under construction :)

So you want to run your own server, eh? Whether you want to free yourself from data mining, commercialising, monetising, greedy be-tied-and-suited media moguls or from the spiritual successors of J. Edgar Hoover and Yuri Andropov does not matter. You want your data to be just that, *your* data. While this might seem extreme to some the idea is actually not far fetched, nor is it impossible to realise. After all, the 'net and the web were conceived as a decentralised network of services. This model, while good in allowing diversity and freedom, is less than ideal from a profitability standpoint so you should not expect those who stand to profit from hoarding your data to lend a helping hand here You're on your own here.
Well, not really on your own of course as there is a metric ton of information on this subject to be found on the 'net. Everything from how to turn that old laptop into a server through using single-board computers as servers through re-purposing whatever you happened to find dumpster-diving. Suffice to say that you need hardware, software and a network connection. A separate router, preferably one under your own control, running known software (OpenWRT, DD-WRT, Tomato, etc) on stable and not to anemic hardware so it can be used to run a VPN to your phone. You'll want your own domain name as well, either one from the free services which are (still) around or something more 'personal'.
Network connection and domain
Here you often don't have that much choice. If possible, choose a wired connection over a wireless one, both for the higher reliability as well as the usually more acceptable use policies and the fact that wireless connections often change IP address. Choose a connection without a traffic cap over one which has one. Choose the connection with the highest upload rate, even if this means settling on a lower download rate - servers send traffic up the net after all.
There are many ways to get a domain name. You can buy one, of course. For a personal server this might be overkill, but the choice is yours. One advantage of having your own domain is that it enables you to keep your mail/jabber/web/whatever addresses no matter what happens (as long as you pay the registrar, of course). You're totally free here as you can simply point your domain elsewhere if you happen to move to another ISP (and/or country...). Cheaper - as in 'free' - is to use one of the many free dynamic DNS services. As long as you have an address to feed your phone and other devices which will make use of your server you're fine.
Router
Best here is to use a router which is fully under your own control. While some ISP routers might be marginally usable, these devices are often at the whim of the ISP as they can be remotely controlled and configured. This is not what you want for your network, so just use the thing in bridge mode if possible, otherwise forward all traffic to your own router. With one of the free and open router firmwares on a reliable device you can do interesting things, ranging from port knocking on the router to VPN tunnels to your mobile devices.
Hardware, storage
Power consumption. heat- and noise production are of more importance than raw power here. There should be enough memory to keep the thing from paging (or 'swapping') on the intended work load on the chosen OS. The same goes for storage: If it fits in the box, fine. If it does not (external drives on laptops, Raspberries, etc) make sure the whole contraption is stable so you don't get any sudden 'disconnects'. For a personal server, power consumption, noise and heat production (which directly relates to reliability) are - again - more important than raw performance.
OS
Any 'unix' of choice is fine here. Linux, *BSD, doesn't matter. Even MacOS would do. Windows, not so much. It is not impossible to use Windows but it is more of a hassle given that a lot of the software is tailored to a unix environment. If you really insist on running Windows, at least make sure it is patched up to the hilt and that all - and that means all - unnecessary services have been switched off.
Software
This is the interesting bit, and the reason why this message is here in the first place. On one of the forum threads here someone was surprised by the fact that I don't run any of the Google apps on my devices, wondering how I got by without Google Play, GMail, contacts and calendar sync etc. Part of the answer to that question involves running your own server, part is covered by using alternatives for the Google-provided apps and services. I would have put this all in a table but it seems this silly forum does not support those...
Commercial service: Alternative (Remarks)
Google Play: F-Droid (The F-Droid store only contains free software. It does not provide a full alternative to the Play Store. If you really want to run the Play Store but still have a notion of privacy on your device, consider enabling Google Services only when required, disabling them afterwards. You can also designate one device as the one which gets to run the Play Store and side-load apps from this device to all others. Theoretically this should be possible using an emulator on your server as well, automating the whole process and creating a 'playstore by proxy'. I have not tried this.)
GMail: IMAP to your own server, eg the Debian standard dovecot daemon. K9 or the standard Android email client on your device.
Contacts: CardDav to your own server (service is provided by ownCloud, amongst others), DAVdroid on your phone or tablet.
Calendar: CalDav to your own server (service is provided by ownCloud, amongst others), DAVdroid on your phone or tablet.
Cloud storage (Dropbox, Google Drive, etc): WebDav to your own server (service is provided by ownCloud, amongst others), one of the many webdav clients on your phone. There is a specific ownCloud app as well.
Photo sharing (Flickr, Smugmug, etc): Trovebox to your own server, Trovebox app on phone
Streaming service (Spotify, Google Music, etc): subsonic on your own server, dSub or Subsonic app on phone (there is a rudimentary streaming service in ownCloud as well, based on Ampache)
More will follow...
If you get in the game on time you might be able to join the Reset the Net initiative!

Reserved #2
This position is reserved for a more thorough list of services

Reserved #3
This position is reserved for a more thorough list of services

YetAnotherForumUser said:
Commercial service: Alternative (Remarks)
Google Play: F-Droid (The F-Droid store only contains free software. It does not provide a full alternative to the Play Store. If you really want to run the Play Store but still have a notion of privacy on your device, consider enabling Google Services only when required, disabling them afterwards. You can also designate one device as the one which gets to run the Play Store and side-load apps from this device to all others. Theoretically this should be possible using an emulator on your server as well, automating the whole process and creating a 'playstore by proxy'. I have not tried this.)
GMail: IMAP to your own server, eg the Debian standard dovecot daemon. K9 or the standard Android email client on your device.
Contacts: CardDav to your own server (service is provided by ownCloud, amongst others), DAVdroid on your phone or tablet.
Calendar: CalDav to your own server (service is provided by ownCloud, amongst others), DAVdroid on your phone or tablet.
Cloud storage (Dropbox, Google Drive, etc): WebDav to your own server (service is provided by ownCloud, amongst others), one of the many webdav clients on your phone. There is a specific ownCloud app as well.
Photo sharing (Flickr, Smugmug, etc): Trovebox to your own server, Trovebox app on phone
Streaming service (Spotify, Google Music, etc): subsonic on your own server, dSub or Subsonic app on phone (there is a rudimentary streaming service in ownCloud as well, based on Ampache)
More will follow...
More later, no time now,
Click to expand...
Click to collapse
This is an interesting topic mainly because android has the potential to become non dependant of google services and I would be nice to keep personal data really personal.
Also there is a No Gapps project here in xda that is quite interesting.

YetAnotherForumUser said:
Router
Best here is to use a router which is fully under your own control. While some ISP routers might be marginally usable, these devices are often at the whim of the ISP as they can be remotely controlled and configured. This is not what you want for your network, so just use the thing in bridge mode if possible, otherwise forward all traffic to your own router. With one of the free and open router firmwares on a reliable device you can do interesting things, ranging from port knocking on the router to VPN tunnels to your mobile devices.
Click to expand...
Click to collapse
This reminded me of something that happened in my dad's office recently:
http://arstechnica.com/civis/viewtopic.php?f=10&t=1209257
The ISP guys configured it that way because dad wanted to run a webserver on one system, the one directly connected to the modem on bridged mode. They apparently didn't think it was necessary to also add a router betweenthe modem and the network of computers :/
Lessons:
1. Don't trust anything the ISP guys do
2. Always us a standalone router or firewall
3. Don't use XP. Seriously.

TJKV said:
This reminded me of something that happened in my dad's office recently:
http://arstechnica.com/civis/viewtopic.php?f=10&t=1209257
The ISP guys configured it that way because dad wanted to run a webserver on one system, the one directly connected to the modem on bridged mode. They apparently didn't think it was necessary to also add a router betweenthe modem and the network of computers :/
Lessons:
1. Don't trust anything the ISP guys do
2. Always us a standalone router or firewall
3. Don't use XP. Seriously.
Click to expand...
Click to collapse
I can recommend something like this. They come with web-face, but you need have atleast base knowledge of how network things work.

slph said:
I can recommend something like this. They come with web-face, but you need have atleast base knowledge of how network things work.
Click to expand...
Click to collapse
Nah when I realised what the ISP guys had done I bought a D-Link 2750U and set it up properly in NAT mode
Wifi also works now since it isn't bridged to a computer anymore

Free Wi-Fi Keys allows you to share with others passwords from Wi-Fi networks

The main goal of the program - to make the Internet accessible in the whole world.
It allows you to:
1) Share the password from any Wi-fi network with other people.
2) Use passwords from Wi-fi networks that are shared by other users of the application.
Among the features:
1) Getting passwords from server via either Wi-fi or 3g \ GPRS channels;
2) Locating Wi-fi networks in certain radius from your current location with phone's GPS sensor, download passwords in program's cache and use them even without Internet connection in place;
3) Displaying all networks listing that you have share;
4) English, Russian and Arabic interface languages;
How does this work:
You come to a place where there are several Wi-fi connections. Open the program and it shows you them. Networks list displays all avaialble Wi-fi networks splitting them into three categories:
a) white with a lock: these are the networks on which the password is not yet known for application's users, they are closed and you can't connect to them if you do not know the password. If you do know the password from the network, you enter it through the application and, accordingly, share with everyone else who uses this program.
b) yellow with a lock: these are the networks for which you do not know the password, but at the same time it has been shared by someone who was in this place before you. If the password is still relevant, you can connect to the network without any problems, if no, you will be prompted to input password, and thus update it.
c) green with a lock: it is just one of the networks, its is the one to which you are connected at the moment;
In addition to these three major categories you can also see networks without the lock either white or yellow which means they are not locked and you can connect to them.
The program works in two ways:
a) when you are connected to the Internet (for example via another Wi-fi network or via GPRS)
b) when you are not connected to the Internet, using passwords from its cache, but for this you will need to pre-download the latest database from the server through the application menu, select "Update Keys" being connected to the Internet, for example while you are at home and have access to the network. In the long term - to retrieve the keys in the specified radius from the point on the map - this is not yet implemented.
This program is completely free and is designed more as a social initiative, rather than as a commercial application. Help each other to make the Internet more open.
Requires Android: 4.0 and up
Developer: Fancy Apps For And
Google Play: https://play.google.com/store/apps/details?id=com.wi_fi_key.freewifikeys&hl=en

It seems like good application, but it is not clear how possible to use it with out internet connection

To use this application you should have the minimum internet

Please do not write a negative comments because you did not find the password from asome network. Be patient and share passwords with another users and once you will be pleasantly surprised open app with Wi-Fi. Many thanks

App is available now on Amazon Store:
you can download application using a link below
https://www.amazon.com/Wi-Fi-passwo...r=1-1&keywords=Wi-Fi+passwords:+use+and+share

There is available new version 2.6 of application in Google Play

Nice

Currently available the updated 2.10 version of application.
Added function of resuming connection to lost wi-fi connection after unsuccessful attempt to connect to another hotspot. .

You can download updated version 2..13 of app on Play market. Instruction has been added.

It was some troubles with server connection and map. Currently available 2.14 version of app on Google Play:
1) The problem with server connection was fixed.
2) The problem with map was fixed.

Available updated 2.17 version of Wi-Fi passwords: use and share application. The authorization using Vkontakte has been added into application.
https://play.google.com/store/apps/details?id=com.wi_fi_key.freewifikeys

New 2.18 version is live now

Wi-Fi passwords use and share
Version 2.19
1) Fixed problem with map.

Updated version of app currently available on Google Play.
1. Bug fix.
2. Work on design.

New version 2.21 posted on Google Play

Application available on Apple Store https://itunes.apple.com/us/app/wifi-hotspot-map-connect-to/id1097105060?mt=8

Public Wifi and Android [in]security

Open question to all, especially if you frequent establishments with open wifi --- What if any security do you use? I'd hope some kind of Firewall, possibly private VPN? And more importantly have you actually verified it provides you with any kind of security?
My issue is this - No matter what I do, cellphones leak data like a waterfall. Seems basically impossible to tell the damn devices to stop broadcasting to the world. Don't call home to clients1.google.com (or any incarnation thereof, and there are many). Don't enable bonjour / zeroconf. Etc.
I literally have no browser installed yet I noticed connecting to open Wifi with portals bring up some kind of browser. Does it store cookies? Does it leak my device id, model, serial # .. IMESI? (believe it or not some applications try to stuff that in an HTTP header).
One of the biggest reasons I ever rooted my phones is I've tried rootless firewalls, they do nothing but have a nice gui.
It's bloody infuriating.