Running Kismet with Ubertooth on OSX

Continuing from yesterdays blog post about getting Ubertooth working on OSX I will now walk through the steps I took to get the Ubertooth Kismet plugin working on OSX.

Step 0: Create a "kismet" group

I used "Server Admin Tools 10.6.8" to create a "kismet" group and added my user to it.

After installing Server Admin Tools run the "Workgroup Manager" application.

image

Enter "localhost" as the address and your user name and password.

image

Go to the "group" tab (image).

Create a new group (image) and call it "kismet" and add your user as a member to the group and save the changes. This is so that the Kismet can escalate the privileges for the process that does the actual data capture without running the whole system with administrative privileges.

Step 1: Download and install Kismet

Download Kismet source and unpack it:

wget http://www.kismetwireless.net/code/kismet-2011-03-R2.tar.gz
tar xvzf kismet-2011-03-R2.tar.gz

Compile and install Kismet:

cd kismet-2011-03-R2
./configure --prefix=/opt/local --with-suidgroup=kismet
make dep
make
sudo make suidinstall

Step 2: Compile and install the Ubertooth plugin

Enter the ubertooth-r238/host/kismet/plugin-ubertooth directory (see previous blog post on getting Ubertooth working on OSX).

Modify the Makefile (modifying the environment variables didn't work for me).

Set KIS_SRC_DIR to where you have unpacked kismet to:

KIS_SRC_DIR ?= /path/to/kismet-2011-03-R2

add -L/opt/local/lib -rpath,/opt/local/lib to LIBS definition

LIBS    += -L/opt/local/lib -rpath,/opt/local/lib -lstdc++ -lusb-1.0 -lpthread -lbtbb

add -I/opt/local/include to CFLAGS definition

CFLAGS    += -I/usr/include -I$(KIS_INC_DIR) -I$(RXTX_INC_DIR) -g -fPIC -I/opt/local/include

Compile the plugin and install it to your users private plugin directory

make
sudo make install

Step 3: Modify kismet.conf

Edit /opt/local/etc/kismet.conf and add pcapbtbb to the logtypes= definition

logtypes=pcapdump,gpsxml,netxml,nettxt,alert,pcapbtbb

Step 4: Running Kismet

Start Kismet by running the "kismet" binary:

kismet

Add the ubertooth interface as a source using the Kismet -> Add Source. The interface and the name should both be "ubertooth".

image

Once you have added the source interface you need to activate the ubertooth plugin by first going Kismet -> Plugins -> Select Plugins...:

image

And then you load the ubertooth plugin:

image

Now you should start seeing some nearby Bluetooth-enabled devices in the Kismet UI and packets are logged in the Kismet-*.pcapbtbb files.

In a later blog post I will get Wireshark work with Ubertooth.

3 comments:

Doktu said...

Kismet works well, thanks for these step by step instructions to install this plugin.

Anonymous said...

Great installation instructions but I hit a snag.

gcc: unrecognized option '-rpath/opt/local/lib'

Any help would be greatly appreciated.

Mike said...

Michael,

How is your packet capture rate? The guys on the #ubertooth on freenode tell me they expect 1/80 packet captures due to channel hopping.

Post a Comment