User manual

Copyright © 2007 by Futures, Inc. All rights reserved
40
Figure - 29 WarDrive data (Platinum Version displayed)
Sniffing a wireless network is a particularly useful way to identify who is using
a network or for what purposes the network is being used (important steps if
you’ve detected an unauthorized wireless network within the organization).
Finally, one of the unique features of Kismet is the ability to detect a wireless
access point’s SSID even if the access point is not broadcasting its name. This
feature is called “decloaking” and is accomplished automatically through
analysis of the wireless traffic. As soon as Kismet detects the name of an
access point that is labeled <no SSID>, an alert will be displayed in the bottom
area of the main Kismet window within the Status area informing the user. In
Figure 30, an access point previously labeled <no SSID> has been decloaked and
will now appear in the main screen network list as <aybabtu>: