Kismet

Overview

Kismet is an open-source wireless sniffer, packet-capture tool, wardriving tool, and wireless intrusion detection system (WIDS). It suits operators who need visibility across several wireless technologies and can manage compatible capture hardware. Its breadth and free, open-source model are compelling, but operating-system restrictions and reduced mobile WIDS accuracy make deployment choices important.

Key features

Kismet can capture Wi-Fi, Bluetooth, Bluetooth LE, Zigbee, wireless-sensor, airplane-beacon, and power-meter data, subject to hardware and driver support. That range can serve investigations spanning multiple types of wireless devices, but does not guarantee support for any particular adapter.

Operators can run it headless as a capture and WIDS system or use its web interface. Remote capture sends supported capture types over TCP sockets or websockets, allowing teams to collect centrally from remote sources. The kismetdb logfile combines packets, devices, location, and runtime data in a SQLite3-based file, keeping those records together for later work.

A REST-like API provides JSON records, streaming pcap-ng, and websocket publish-subscribe endpoints. WIDS alerts can flow through live packet and alert REST APIs, syslog, and some SIEM tools. These interfaces make Kismet adaptable to existing workflows, though the stated SIEM integration scope is not universal.

Kismet’s WIDS is most effective when stationary; mobile or channel-hopping operation may reduce its accuracy and coverage. That makes it a stronger fit for fixed monitoring than for dependable detection while moving. Installation guidance recommends elevated privileges for capture sources but advises against running the Kismet server itself as root, a distinction worth preserving when configuring a deployment.

Pricing

Kismet is free and open source. The Kismet plan costs nothing, with no paid plan or usage limit stated. It is a straightforward choice for individuals or teams able to operate and maintain their own installation; there is no paid tier to move to for additional stated capacity.

Platforms

Kismet runs on Linux and macOS and can run on Windows through WSL. On macOS, support covers the Airport internal Wi-Fi adapter and certain named devices, not generic USB Wi-Fi devices, because suitable monitor-mode drivers are lacking. Windows users face a more significant capture constraint: WSL cannot directly access local USB, PCI, or other hardware interfaces for packet capture. Remote capture is supported, so Windows can still participate in a distributed setup, but it is not the path for capturing directly from local hardware through WSL.

The project identifies 2025-09-R1 as its latest stable release. It directs users to its documentation and provides a community Discord server for support.

Who it's for

Kismet is best for technically capable operators who need broad wireless capture, WIDS, packet logs, and remote collection in one open-source tool. It is particularly suitable for stationary monitoring or deployments where collectors can run on supported hardware and forward captures centrally. It is a weaker choice for users expecting generic USB Wi-Fi capture on macOS, direct local-hardware capture under Windows WSL, or reliable mobile WIDS coverage.

Pros and cons

• Pros: Broad capture coverage across Wi-Fi, Bluetooth, Zigbee, and other wireless data types, subject to compatible hardware and drivers.
• Pros: Headless operation, remote capture, and a combined SQLite3-based logfile support centralized and flexible collection.
• Pros: REST-like, websocket, pcap-ng, and syslog integration paths can connect capture and alerts to other workflows.
• Pros: Free and open source, with no stated usage limit.
• Cons: Capture depends on hardware and drivers, and macOS does not support generic USB Wi-Fi devices for monitor mode.
• Cons: Windows WSL cannot access local hardware interfaces for packet capture, limiting direct capture from that platform.
• Cons: Mobile or channel-hopping use can reduce WIDS accuracy and coverage, making it less suitable for consistent mobile monitoring.

Alternatives

For a more focused Wi-Fi analysis choice, compare the Wi-Fi Analyzer Software list; for packet-level protocol analysis, see Network Protocol Analyzers.

NetSpot is worth considering for Wi-Fi analysis on Android or iOS as well as macOS and Windows; its free edition is for personal and evaluation use, and a free trial is offered. Choose WiFiman if a free, ad-free mobile app is the priority, bearing in mind that its desktop supports only UniFi Device Discovery and Teleport VPN.

inSSIDer offers a free download for Wi-Fi scanning and visualization, requiring a free Oscium account; it is a narrower alternative for those tasks. Parkdale is another free option.

Vistumbler is free and open-source software. DTNT may suit Windows users seeking a Wi-Fi survey, live channel view, IP scanner, speed tests, saved history, profile review, and a one-time ping in its free plan. Wi-Fi Scanner is an alternative for Windows users who want a perpetual free license for personal, non-commercial use. For online Wi-Fi design with Cambium APs, consider Wi-Fi Designer, a free web tool.

Verdict

Choose Kismet if you need open-source capture and WIDS across multiple wireless technologies, with remote collection and integration options, and can match your hardware and operating system to its constraints. Look elsewhere if you need straightforward local capture on Windows WSL, generic USB Wi-Fi support on macOS, or dependable WIDS while mobile.