Changeset 103

Show
Ignore:
Timestamp:
09/25/06 23:46:13 (2 years ago)
Author:
ken
Message:

Kismet 2006-04-R1 binaries

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • Pyramid/dist/usr/local/etc/kismet.conf

    r1 r103  
    55 
    66# Version of Kismet config 
    7 version=2004.03.devel.a 
    8  
    9 # Name of server (Purely for organiational purposes) 
     7version=2005.06.R1 
     8 
     9# Name of server (Purely for organizational purposes) 
    1010servername=Kismet 
    1111 
    1212# User to setid to (should be your normal user) 
    13 suiduser=kismet 
     13suiduser=your_user_here 
    1414 
    1515# Sources are defined as: 
    16 # source=cardtype,interface,name[,initialchannel] 
    17 # Card types and required drivers are listed in the README. 
     16# source=sourcetype,interface,name[,initialchannel] 
     17# Source types and required drivers are listed in the README under the 
     18# CAPTURE SOURCES section. 
    1819# The initial channel is optional, if hopping is not enabled it can be used 
    1920# to set the channel the interface listens on. 
    20 #source=cisco,eth0,ciscosource 
    21 # Other common source configs: 
    22 #source=prism2,wlan0,prism2source 
    23 #source=prism2_avs,wlan0,newprism2source 
    24 # source=orinoco,eth0,orinocosource 
    25 # An example source line with an initial channel: 
    26 # source=orinoco,eth0,silver,11 
    27 # 
    28 # For Metrix boxes: 
    29 #source=hostap,wlan0,hostapsource 
    30 #source=hostap,wlan1,hostapsource 
    31 #source=madwifi_ag,ath0,ath0 
    32 #source=madwifi_ag,ath1,ath1 
     21# YOU MUST CHANGE THIS TO BE THE SOURCE YOU WANT TO USE 
     22source=none,none,addme 
    3323 
    3424# Comma-separated list of sources to enable.  This is only needed if you defined 
    …… 
    10797# numbers (/24) 
    10898allowedhosts=127.0.0.1 
     99# Address to bind to.  Should be an address already configured already on 
     100# this host, reverts to INADDR_ANY if specified incorrectly. 
     101bindaddress=127.0.0.1 
    109102# Maximum number of concurrent GUI's 
    110103maxclients=5 
    111104 
    112105# Do we have a GPS? 
    113 gps=false 
     106gps=true 
    114107# Host:port that GPSD is running on.  This can be localhost OR remote! 
    115108gpshost=localhost:2947 
    …… 
    138131 
    139132# Alerts to be reported and the throttling rates. 
    140 # alert=name,throttle/unit,burst 
     133# alert=name,throttle/unit,burst/unit 
    141134# The throttle/unit describes the number of alerts of this type that are 
    142135# sent per time unit.  Valid time units are second, minute, hour, and day. 
    143 # Burst describes the number of alerts sent before throttling takes place. 
     136# Burst rates control the number of packets sent at a time 
    144137# For example: 
    145 # alert=FOO,10/min,5 
    146 # Would allow 5 alerts through before throttling is enabled, and will then 
    147 # limit the number of alerts to 10 per minute. 
     138# alert=FOO,10/min,5/sec 
     139# Would allow 5 alerts per second, and 10 alerts total per minute. 
    148140# A throttle rate of 0 disables throttling of the alert. 
    149141# See the README for a list of alert types. 
    150 alert=NETSTUMBLER,5/min,2 
    151 alert=WELLENREITER,5/min,2 
    152 alert=LUCENTTEST,5/min,2 
    153 alert=DEAUTHFLOOD,5/min,4 
    154 alert=BCASTDISCON,5/min,4 
    155 alert=CHANCHANGE,5/min,4 
    156 alert=AIRJACKSSID,5/min,2 
    157 alert=PROBENOJOIN,5/min,2 
    158 alert=DISASSOCTRAFFIC,5/min,2 
    159 alert=NULLPROBERESP,5/min,5 
     142alert=NETSTUMBLER,10/min,1/sec 
     143alert=WELLENREITER,10/min,1/sec 
     144alert=LUCENTTEST,10/min,1/sec 
     145alert=DEAUTHFLOOD,10/min,2/sec 
     146alert=BCASTDISCON,10/min,2/sec 
     147alert=CHANCHANGE,5/min,1/sec 
     148alert=AIRJACKSSID,5/min,1/sec 
     149alert=PROBENOJOIN,10/min,1/sec 
     150alert=DISASSOCTRAFFIC,10/min,1/sec 
     151alert=NULLPROBERESP,10/min,1/sec 
     152alert=BSSTIMESTAMP,10/min,1/sec 
    160153 
    161154# Known WEP keys to decrypt, bssid,hexkey.  This is only for networks where 
    …… 
    199192# Server's path to Festival 
    200193festival=/usr/bin/festival 
     194# Are we using festival lite?  If so, set the above "festival" path to also 
     195# point to the "flite" binary 
     196flite=false 
    201197# How do we speak?  Valid options: 
    202198# speech    Normal speech 
    …… 
    227223# recent versions of GPSDrive's native support of Kismet. 
    228224waypoints=false 
    229 # GPSMap waypoint file.  This WILL be truncated. 
     225# GPSDrive waypoint file.  This WILL be truncated. 
    230226waypointdata=%h/.gpsdrive/way_kismet.txt 
     227# Do we want ESSID or BSSID as the waypoint name ? 
     228waypoint_essid=false 
    231229 
    232230# How many alerts do we backlog for new clients?  Only change this if you have 
    …… 
    257255# to see what they are, but someting is wrong with them that prevents us from 
    258256# completely dissecting them.  Logging these is usually not a bad idea. 
    259 corruptlog=false 
     257corruptlog=true 
    260258 
    261259# Do we log beacon packets or do we filter them out of the dumpfile 
    262 beaconlog=false 
     260beaconlog=true 
    263261 
    264262# Do we log PHY layer packets or do we filter them out of the dumpfile 
    265 phylog=false 
     263phylog=true 
    266264 
    267265# Do we mangle packets if we can decrypt them or if they're fuzzy-detected 
    268 mangledatalog=false 
     266mangledatalog=true 
    269267 
    270268# Do we do "fuzzy" crypt detection?  (byte-based detection instead of 802.11 
    …… 
    272270# valid option: Comma seperated list of card types to perform fuzzy detection  
    273271#  on, or 'all' 
    274 fuzzycrypt=wtapfile,wlanng,wlanng_legacy,wlanng_avs,hostap,wlanng_wext 
     272fuzzycrypt=wtapfile,wlanng,wlanng_legacy,wlanng_avs,hostap,wlanng_wext,ipw2200,ipw2915 
     273 
     274# Do we use network-classifier fuzzy-crypt detection?  This means we expect  
     275# packets that are associated with an encrypted network to be encrypted too,  
     276# and we process them by the same fuzzy compare.  
     277# This essentially replaces the fuzzycrypt per-source option. 
     278netfuzzycrypt=true 
    275279 
    276280# What type of dump do we generate?  

  • Pyramid/dist/usr/local/etc/kismet_drone.conf

    r1 r103  
    1717# numbers (/24) 
    1818allowedhosts=127.0.0.1 
     19# Address to bind to.  Should be an address already configured already on  
     20# this host, reverts to INADDR_ANY if specified incorrectly. 
     21bindaddress=127.0.0.1 
    1922# Maximum number of concurrent stream attachments 
    2023maxclients=5 
    2124 
    22 # Packet sources: 
    23 # source=capture_cardtype,capture_interface,capture_name 
    24 # Card type - Specifies the type of device. It can be one of: 
    25 #     cisco         - Cisco card with Linux Kernel drivers  
    26 #     cisco_cvs     - Cisco card with CVS Linux drivers 
    27 #     cisco_bsd     - Cisco on *BSD 
    28 #     prism2        - Prism2 using wlan-ng drivers with pcap support (all  
    29 #                      current versions support pcap) 
    30 #     prism2_hostap - Prism2 using hostap drivers 
    31 #     prism2_legacy - Prism2 using wlan-ng drivers without pcap support (0.1.9) 
    32 #     prism2_bsd    - Prism2 on *BSD 
    33 #     orinoco       - Orinoco cards using Snax's patched driers 
    34 #     generic       - Generic card with no specific support.  You will have  
    35 #                      to put this into monitor mode yourself! 
    36 #     wsp100        - WSP100 embedded remote sensor.   
    37 #     wtapfile      - Saved file of packets readable by libwiretap 
    38 #     ar5k          - ar5k 802.11a using the vt_ar5k drivers 
    39 # Capture interface - Specifies the network interface Kismet will watch for 
    40 #  packets to come in on.  Typically "ethX" or "wlanX".  For the WSP100 capture 
    41 #  engine, the WSP100 device sends packets via a UDP stream, so the capture 
    42 #  interface should be in the form of host:port where 'host' is the WSP100 and  
    43 #  'port' is the local UDP port that it will send data to. 
    44 # Capture Name      - The name Kismet uses for this capture source.  This is the  
    45 #   name used to specify what sources to enable. 
    46 #  
    47 # To enable multiple sources, specify a source line for each and then use the 
    48 # enablesources line to enable them.  For example: 
    49 # source=prism2,wlan0,prism 
    50 # source=cisco,eth0,cisco 
    51  
    52 source=cisco,eth0,Kismet-Drone 
     25# Sources are defined as: 
     26# source=sourcetype,interface,name[,initialchannel] 
     27# Source types and required drivers are listed in the README. 
     28# The initial channel is optional, if hopping is not enabled it can be used 
     29# to set the channel the interface listens on. 
     30# YOU MUST CHANGE THIS TO BE THE SOURCE YOU WANT TO USE 
     31source=none,none,addme 
    5332 
    5433# Comma-separated list of sources to enable.  This is only needed if you wish  

  • Pyramid/dist/usr/local/etc/kismet_ui.conf

    r1 r103  
    22 
    33# Version of Kismet config 
    4 version=Feb.04.01a 
     4version=2004.10.R1 
    55 
    66# Do we show the intro window? 
    …… 
    2323# NOT to be confused with "sound" option later, which is for the SERVER to make 
    2424# noise on whatever host it's running on. 
    25 sound=false 
     25sound=true 
    2626# Path to sound player 
    2727soundplay=/usr/bin/play 
    …… 
    4848# Do we autogroup data-only networks? 
    4949autogroup_data=true 
     50# Do we autogroup adhoc networks? 
     51autogroup_adhoc=true 
    5052 
    5153# Display battery status? 
    52 apm=false 
     54apm=true 
    5355 
    5456# Does the GUI talk to us with Festival? 
    …… 
    5658# Where is festival located for the GUI? 
    5759festival=/usr/bin/festival 
     60# Are we using festival light?  If so, point the above "festival" path to the 
     61# "flite" binary. 
     62flite=false 
    5863# How do we speak?  Valid options: 
    5964# speech    Normal speech