Alerts

Kismet uses alerts to communicate wireless intrusion events and critical Kismet server events. Alerts are generated both as text messages on the messagebus and as dedicated alert records. For real-time monitoring of alerts, see the eventbus API. Alert severities # Alerts severities are categorized by numerical value; a higher number is more severe. Severity Defintion Use 0 INFO Informational alerts, such as datasource errors, Kismet state changes, etc 5 LOW Low-risk events such as probe fingerprints 10 MEDIUM Medium-risk events such as denial of service attempts 15 HIGH High-risk events such as fingerprinted watched devices, denial of service attacks, and similar 20 CRITICAL Critical errors such as fingerprinted known exploits Alert types # Alerts are categorized by type; alert types are free-form strings, but include: