Kismet

Kismet is a free, open-source platform for wireless sniffing, packet capture, wardriving and wireless intrusion detection. It suits security teams, researchers and technically capable operators who can provide compatible capture hardware and manage a self-hosted deployment. Its strongest case is broad, scriptable collection without licensing costs, while platform constraints make setup less straightforward on macOS and Windows.

Overview

Kismet combines a wireless sniffer, WIDS, wardriving tool and packet-capture system in one package. It can operate without a graphical session as a standalone capture and detection service, or expose a web interface for users who prefer browser-based control. That flexibility fits both unattended collectors and interactive investigations.

The project is free and open source, with no paid plan or stated usage ceiling. The latest stable release identified by the project is Kismet 2025-09-R1. Documentation and a community Discord server provide the main support channels, so organizations should be comfortable with a community-supported deployment rather than a contracted help desk.

Key features

Kismet covers Wi-Fi, Bluetooth, Bluetooth LE, Zigbee, wireless-sensor, airplane-beacon and power-meter data when the chosen hardware and drivers support those sources. This breadth is valuable for teams investigating mixed wireless environments, but it also puts adapter selection and driver compatibility at the center of any rollout.

Remote capture sends supported capture types over TCP sockets or websockets to a central collector. That architecture is useful when sensors must be distributed across sites while analysis and storage remain centralized. The kismetdb logfile stores packets, devices, location and runtime information together in a SQLite3-based file, preserving context that can otherwise be scattered across separate logs.

An API exposes JSON records, streaming pcap-ng and websocket publish-subscribe endpoints. Live packet and alert REST APIs, syslog and some SIEM integrations let WIDS events feed existing monitoring workflows. CLI tools, PCAP support, traffic decryption and flow analysis make it suitable for users who need both collection and downstream examination rather than a simple signal-strength view.

Installation guidance recommends elevated privileges for capture sources but advises against running the Kismet server itself as root. That separation is an important operational safeguard and requires administrators to configure permissions deliberately.

Pricing

Kismet costs nothing. It is free and open source, has no free trial because no trial period is needed, and has no paid tier or stated usage limit. The absence of seat, sensor or retention charges makes it practical for expanding self-hosted deployments, provided the organization can supply and maintain the required hardware and infrastructure.

Platforms

Kismet supports Linux and macOS directly and is available as a self-hosted service with API access. Windows operation is through WSL. WSL cannot directly access USB, PCI or other local hardware interfaces for packet capture, so Windows users generally need remote capture sources rather than a locally attached adapter.

macOS supports the Airport internal Wi-Fi adapter and certain named devices, but generic USB Wi-Fi adapters are not supported because suitable monitor-mode drivers are lacking. Linux therefore offers the broadest practical hardware choice. Kismet can also run headless, which is useful on dedicated sensors and servers.

Who it's for

Kismet is a strong fit for security teams, wireless researchers and infrastructure operators who need multi-protocol capture, centralized remote sensors or API-driven processing. It is also appropriate for technically confident individuals building a wardriving or packet-analysis setup without a subscription.

Choose another tool if you need a consumer-oriented scanner, guaranteed local capture on Windows, or dependable mobile WIDS coverage. Kismet says WIDS is most effective while stationary; mobile or channel-hopping operation can reduce detection accuracy and channel coverage.

Pros and cons

Pros

• Broad wireless coverage: one system can collect several wireless technologies when compatible hardware is available.
• Free and open source: there is no paid plan, seat fee or stated usage cap.
• Distributed collection: TCP and websocket remote capture supports centralized operations.
• Automation-ready: REST-like, streaming and websocket APIs, plus syslog and some SIEM integrations, support custom workflows.
• Rich records: the SQLite3-based kismetdb format keeps packet, device, location and runtime data together.

Cons

• Hardware-dependent: advertised protocol coverage still depends on suitable adapters and drivers.
• macOS restrictions: generic USB Wi-Fi capture is unavailable, limiting adapter choices.
• Windows capture limits: WSL cannot access local capture hardware directly, making remote sources necessary.
• Reduced mobile WIDS coverage: movement and channel hopping can lower accuracy and visibility.
• Technical administration: privilege separation and self-hosting demand careful setup.

Alternatives

For a more conventional Wi-Fi survey interface, consider NetSpot; its free macOS and Windows edition and optional paid subscription suit users who do not need Kismet's multi-protocol capture and WIDS model.

WiFiman is a better fit for a free, ad-free mobile app across Android and iOS, while its desktop edition is limited to UniFi Device Discovery and Teleport VPN.

Choose inSSIDer for Wi-Fi scanning and visualization on macOS or Windows when a free account-based edition or paid MetaGeek Plus subscription is preferable.

Parkdale is a free alternative for users seeking a simpler cross-platform utility rather than wireless intrusion detection.

Vistumbler offers free, open-source wireless tooling on Windows and Android.

DTNT suits Windows users wanting survey, channel-view, scanning and speed-test workflows, with a one-time Pro upgrade.

Wi-Fi Scanner is aimed at personal or business Wi-Fi scanning on Windows, with separate licensing terms.

iwScanner is a Linux-only free wireless scanner when Kismet's broader capture and WIDS capabilities are unnecessary.

For broader category browsing, see Wi-Fi Analyzer Software and Network Protocol Analyzers.

Verdict

Kismet is the right choice for capable operators who need broad wireless capture, centralized remote collection and programmable WIDS data without a license bill. Choose it for Linux-centered or carefully planned self-hosted deployments; look elsewhere when plug-and-play hardware support, straightforward Windows capture or consistently accurate mobile detection matters more than protocol breadth and control.