State of Newcore
dr
Newcore is coming along very well. What works so far:
pcapfile replaying
ipw2200 capturing
core packet chain framework
alert framework
network framework
GPS framework and gpsd client
GPS logging
tun/tap realtime packet exporting
Basic client functionality with existing clients (NETWORK info)
Dumpfile framework
802.11 frame dissection
Data frame dissection
Extended encryption detection (ie WPA, WPA2, TKIP, etc)
WEP decryption (untested)
CDP processing
Basic network tracking
What doesn't really work at all yet:
Client tracking
Server/Drone
Any other capture sources
BSD
Many alerts
Plugin loaders
Documentation is very out of date (README from original fork)
Lots of other stuff.
Newcore development is really moving along well now that the framework is able
to function on its own. At this point I'm really aiming to discontinue new
features in the existing codebase and concentrate on adding them to newcore
instead. I said this a year ago, but this time the code is actually ready.
Anyone looking to add new functionality to Kismet is strongly encouraged to look
at the newcore branch in subversion rather than the current stable or development
branches. Newcore is MUCH easier to write for, and the code is a lot saner.
As development continues I'll post more documentation on the API, and when
plugins are supported all the key API components will at least have SOME
documentation.
Plugin loaders are not yet written, but the entire codebase is modular and even
the builtin components install themselves via the mechanisms that plugins
would use. This means that a plugin can do essentially anything that
kismet can do internally, including:
Adding new network protocols for custom clients
Adding new packet dissection methods (such as for extracting IPs)
Adding new network trackers independent of the Kismet tracking methods
Adding new decryption methods
Adding new capture sources
Adding new logging methods (ie, log to mysql)
Basically anything else.
The newcore changelog can be pulled directly from
here
Some rambling on the newcore design methods is
here