Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This explanation isn't clear to me.

Let me describe an application for web site recognition. Suppose that we want to know what everyone is doing with the web at starbuck. We can use wireshark or other programs to sniff all the packets. By grouping all the secondary connections with the primary one, then we would be able to get a much easier picture of user's primary activities.

Is this talking about being able to recognize which websites each of the laptops are connecting to?

share|improve this question
What's the context of this quote? – ChrisF Mar 5 '11 at 22:50
It's about doing a programming project. One of the project choices is "web site recognition." – tony_sid Mar 5 '11 at 22:51
up vote 2 down vote accepted

An alternate title for this project might be "How to spy on naive users while enjoying a latte". ;-)

Access points in public places are usually unsecured. Using Wireshark or another program you can capture all the packets. You can then sort the packets by user (using the IP address), then further sort the packets by protocol (say HTTP for web sites), and then by the web site. From this you can form a profile of each user by the primary task they are doing (say Facebook) and the secondary tasks (other web sites, Skype, etc.). You can then form a profile of the users in the coffee shop which you could use for various purposes, such as amusing yourself, advertising, stealing passwords and identities, locating dissidents and arresting them, etc.

An interesting thing to do might be to classify the HTTP and HTTPS traffic to see how many people are concerned enough about their information to use secure connections. Conducting a scan in various public places might yield some interesting insights. For example, are people near the local police station more or less concerned about security than students at university? While HTTPS traffic is encrypted, the IP addresses are not, so you can still form a profile of what people are doing in general, while not being able to see the content of their messages.

share|improve this answer
How would the program get this information from Wireshark? – tony_sid Mar 6 '11 at 0:15
Wireshark will save captured packets in a file that's documented (I think it's called tcpdump, but I might be wrong). There's also a program called Kismet that will capture wireless data to the same file formats that might be of more use to you. – Wayne Johnston Mar 10 '11 at 2:42

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .