			Beholder V. 0.8.6

          Nelson Murilo <nelson@pangeia.com.br> (main author)

         beholder is available at: http://www.beholderwireless.org/


                 No illegal activities are encouraged!
         I'm not responsible for anything you may do with it.

		This tool includes some portion of software developed 
		by Jean Tourrilhes to  Wireless-Tools package. 
                 


1. What's is beholder? 
---------------------

Beholder is a tool to detect some malicious actions in wifi environment, such as
essid, mac and channel changes for legitime networks, alert for new "suspect"
networks and it detects passive malicious hotspot tools, like karma and hotpotter. 
Also can detects similar essid names and alert for APs suddenly disappear based in regular 
expressions.

By default, beholder can detect Judicious KARMA and some types of jamming 

2. Supported Systems
--------------------

Beholder currently works ony in Linux 2.6.x. 


3. Instalation 
-------------

# make sense

PS: 
Please ignore "warning: the use of `mktemp' is dangerous, better use `mkstemp' or `mkdtemp'" message, we won't using temporary files, that function just is a easy way to create a random essid. 


4. Usage
---------

beholder [options] <wifi_device> 

Options:

	-s 	send reports to syslog instead to console. 
	-a 	add new networks in initial network table (usual option) 
	-r 	regular expression to check essid name variations (case insensitive by default)
	-m 	regular expression to check disappeared essid name 
        -d	debug 
        -dd	verbose  

Regular expression option works in complete mode, please spend a time to learn about regex, to explore all potential of it. 

Example: 
beholder -r ".*[1i]nf[0o]s[3e]c.*" 
It match "0infosec", "inf0sec","1nfosec-1", etc. 

beholder -r ".*[1i]nf[0o]s[3e]c.*" -m ".*companynet.*"


5. Reports and questions
-----------------------

Please send comments, questions and bug reports to nelsonatbeholderwireless.org


6. ACKNOWLEDGMENTS

Many thanks to Luiz Eduardo and  Kevin365 they really nice ideas and bugs reports. 

