true a storm of them wouldnt be normal network traffic, but i can do a great deal of damage with just a handfull (7 or less, sometimes as few as one), that would look exactly like an AP (and yes many AP's regularly deauth or disassoc stations for various reasons)...im not saying he's wasting his time, im just saying that you should be careful before you go so far as to consider that an IDS, you need alot more than that if you want a real IDS...
ack! i totally agree with you in that point...(i've already implemented commercial ids's so i know what it's about
...horrible sometimes, but that's another sad story)
as for the next things i'll be coming out with im working on one driver to work on all three 802.11b card types and will support normal modes of operations (infrastructure, adhoc, and host-AP)...these will be linux drivers, they will run in 802.11b native mode (not imulating ethernet)...the best part is they will offer airjack type abilities and should be much more stable than the first proof of concept code i have up there right now...one last thing to look for is for me to have my cvs servers back online so i can have some real development going on (ive been moving into a new house and all my servers have been offline)...
sounds cool....i wish i could contribute something to those projects, but i'm to lame to do professional coding...maybe when i have more time, i'm gonna read all the books about coding perl, c, c++ i've already bought, and that are currently only wasting space in my bookshelf
as for kismet, im interested in what he's working on next as well, its a cool program maybe in the future we could see a joint project of some kind (no sense in everyone working on the same goals in different directions)...
yeah, sound nice too...could be a great merge
see ya