User manual

Operations

After Kismet has terminated, a WhirlWind process called “DustDevil” (DD) runs.

DustDevil processes all of the .csv files found in the storage directory. See the

figure below for an example screenshot for DD data processing.

• The contents of all of the .csv files are merged together and analyzed.

• The “best” geolocation data for each unique BSSID is processed into the

Dustdevil .kml, and .html files.

• A summary count is displayed on Console #1

o Total networks (BSSIDs) for the aggregate .kml

o Count of “BEST” geolocation as identified by Kismet

o Count of “Averaged” geolocation. These networks did not have a

“Best” identified by Kismet; but did have Max/Min geolocation;

the center of which will be plotted.

o Count of “Interpolated” geolocation. These BSSIDs did not have

valid location data, and are positioned midway between prior and

next networks. Invalid location data are floating point multiples

of 90.0° (0.0, 90.0,180.0 )

• The WiFi card selection process starts again.

Figure - 33 DustDevil Processing Mapping Data

NOTE:

If operations of WhirlWind are terminated by a summary “power-off” or

Ctl-Alt-Del while Kismet is running; DustDevil will not be given the opportunity

to process the final (only) .csv file. This will result in either no .kml will be

present or, in the case of multiple Kismet runs, the .kml will not include the

final .csv file’s data.

Resulting Product

An HTML summary of the wireless networks shown in the prior image looks like

the following: