			Beholder V. 0.8.10

          Nelson Murilo <nelson@pangeia.com.br> (main author)

         beholder is available at: http://www.beholderwireless.org/


                 No illegal activities are encouraged!
         I'm not responsible for anything you may do with it.

		This tool includes some portion of software developed 
		by Jean Tourrilhes to  Wireless-Tools package. 
                 


1. What's is beholder? 
---------------------

Beholder is a tool to detect some anomalise in wifi enviroment, such as
essid, mac encryption protocol and channel changes for legitime networks, alert for new "suspect"
networks and it detects passive malicious hotspot tools, like karma and hotpotter. 
Also can detects similar essid names and alert for APs suddenly disappear based on regular expressions.

By default, beholder can detect Judicious KARMA, and some types of jamming 

2. Supported Systems
--------------------

Beholder currently works ony in Linux 2.6.x. 


3. Instalation 
-------------

# make sense

PS: 
Please ignore "warning: the use of `mktemp' is dangerous, better use `mkstemp' or `mkdtemp'" message, we won't using temporary files, that function just is a easy way to create a random essid. 


4. Usage
---------

beholder [options] <wifi_device> 

Options:

	-s 	send reports to syslog instead to console. 
	-a 	add new networks in initial network table (usual option) 
	-r 	regular expression to check essid name variations (case insensitive by default)
	-m 	regular expression to check disappeared essid name 
	-c 	clever mode. Detect similar essid based on same length and similar name. Regular expression is not used here. 
        -d	debug 
        -dd	verbose  

Regular expression option works without limitations, please spend a time to learn about regex, to explore all potential of this. 

Example: 
beholder -r ".*[1i]nf[0o]s[3e]c.*" 
It match "0infosec", "inf0sec","1nfosec-1", etc. 

beholder -r ".*[1i]nf[0o]s[3e]c.*" -m ".*companynet.*"


5. Reports and questions
-----------------------

Please send comments, questions and bug reports to nelsonatbeholderwireless.org


6. ACKNOWLEDGMENTS

Many thanks to Andre ..., Luiz Eduardo, Ronaldo Vasconcellos and Willian Caprino for they really nice ideas and bugs reports 

