KDSP

Kismet Drone/Server Protocol(KDSP)

Kismet is a wireless sniffer (and intrusion detection system) which is widely used to sniff Wireless LAN (e.g 802.11b, 802.11a, and 802.11g traffic). Kismet Drone/Server protocol is used by for communication between a Kismet drone and a Kismet server.

Another protocol (Kismet Client/Server Protocol) is used by Kismet server for communication with Kismet clients.

History

KDSPv1 - KDSP is currently at version 1. It is designed to be extendible and backwards compatible.

Protocol dependencies

Example traffic

kdsp_screenshot.png

Wireshark

The KDSP dissector is partially functional. While most of the communication is correctly dissected, not all bitmaps are translated to a readable format.

Preference Settings

None

Example capture file

Display Filter

A complete list of KDSP display filter fields can be found in the display filter reference

Show only the KDSP based traffic:

 kdsp 

Capture Filter

You cannot directly filter KDSP protocols while capturing. However, if you know the TCP port used (see above), you can filter on that one.

Capture only the KDSP traffic over the default port (2502):

 tcp port 2502 

External links

Discussion


Imported from https://wiki.wireshark.org/KDSP on 2020-08-11 23:15:45 UTC