Forum

Correct. NetStumbler will only detect hidden SSIDs AFTER sending out probe requests, thus it is an active scanning tool and if the ESS has any decent IDS on it, will detect the scan. Kismet and a few others I believe can detect them in passive scanning. We had this "mix up" in a few labs during class where it was a discussion of "yes it detects them but.." To the user, it would appear that it detects them, and it does, just not passively, so if you are trying to be stealthier about it, NetStumble is not the tool.