Package: psad (2.1.7-1)

[ Source: psad  ]

Port Scan Attack Detector

PSAD is a collection of four lightweight system daemons (in Perl and C) designed to work with iptables to detect port scans. It features:

 * a set of highly configurable danger thresholds (with sensible
   defaults provided);
 * verbose alert messages that include the source, destination,
   scanned port range, beginning and end times, TCP flags, and
   corresponding Nmap options;
 * reverse DNS information;
 * alerts via email;
 * automatic blocking of offending IP addresses via dynamic firewall
   configuration.

When combined with fwsnort and the iptables string match extension, PSAD is capable of detecting many attacks described in the Snort rule set that involve application layer data.

Tags: System Administration: Monitoring, Implemented in: Perl, User Interface: Daemon, Networking: Firewall, Server, Role: Program, Security: Firewall, Intrusion Detection, Purpose: Checking

Other Packages Related to psad

• dep: bsd-mailx

  simple mail user agent

  or mailx

  virtual package provided by bsd-mailx, heirloom-mailx, mailutils

  or mailutils

  GNU mailutils utilities for handling mail

• dep: default-mta

  virtual package provided by exim4-daemon-light

  or mail-transport-agent

  virtual package provided by citadel-mta, courier-mta, dma, esmtp-run, exim4-daemon-heavy, exim4-daemon-light, masqmail, msmtp-mta, nullmailer, postfix, sendmail-bin, ssmtp, xmail

• dep: iptables

  administration tools for packet filtering and NAT

• dep: libc0.1 (>= 2.3) [kfreebsd-amd64, kfreebsd-i386]

  Embedded GNU C Library: Shared libraries
  also a virtual package provided by libc0.1-udeb

• dep: libc6 (>= 2.3) [amd64, i386, mips, mipsel]

  Embedded GNU C Library: Shared libraries
  also a virtual package provided by libc6-udeb

  dep: libc6 (>= 2.4) [armel, powerpc, s390]

  dep: libc6 (>= 2.6) [sparc]

• dep: libc6.1 (>= 2.3) [ia64]

  Embedded GNU C Library: Shared libraries
  also a virtual package provided by libc6.1-udeb

• dep: libcarp-clan-perl

  Perl enhancement to Carp error logging facilities

• dep: libdate-calc-perl

  Perl library for accessing dates

• dep: libiptables-chainmgr-perl

  Perl extension for manipulating iptables policies

• dep: libiptables-parse-perl

  Perl extension for parsing iptables firewall rulesets

• dep: libnetwork-ipv4addr-perl

  Perl extension for manipulating IPv4 addresses

• dep: libunix-syslog-perl

  Perl interface to the UNIX syslog(3) calls

• dep: lsb-base (>= 3.0-6)

  Linux Standard Base 3.2 init script functionality

• dep: perl

  Larry Wall's Practical Extraction and Report Language

• dep: psmisc

  utilities that use the proc file system

• dep: rsyslog

  enhanced multi-threaded syslogd

  or system-log-daemon

  virtual package provided by busybox-syslogd, dsyslog, inetutils-syslogd, rsyslog, socklog-run, sysklogd, syslog-ng

• dep: whois

  an intelligent whois client

• sug: bastille

  Package not available

• sug: fwsnort

  Snort-to-iptables rule translator

Download psad

Download for all available architectures

Architecture	Package Size	Installed Size	Files
amd64	182.8 kB	680.0 kB	[list of files]
armel	186.8 kB	764.0 kB	[list of files]
i386	183.8 kB	768.0 kB	[list of files]
ia64	189.7 kB	796.0 kB	[list of files]
kfreebsd-amd64	183.7 kB	700.0 kB	[list of files]
kfreebsd-i386	182.1 kB	696.0 kB	[list of files]
mips	189.1 kB	776.0 kB	[list of files]
mipsel	183.9 kB	776.0 kB	[list of files]
powerpc	183.7 kB	768.0 kB	[list of files]
s390	183.4 kB	768.0 kB	[list of files]
sparc	183.3 kB	768.0 kB	[list of files]