Package: psad (2.2-1 and others)

[ Source: psad  ]

Port Scan Attack Detector

PSAD is a collection of four lightweight system daemons (in Perl and C) designed to work with iptables to detect port scans. It features:

 * a set of highly configurable danger thresholds (with sensible
   defaults provided);
 * verbose alert messages that include the source, destination,
   scanned port range, beginning and end times, TCP flags, and
   corresponding Nmap options;
 * reverse DNS information;
 * alerts via email;
 * automatic blocking of offending IP addresses via dynamic firewall
   configuration.

When combined with fwsnort and the iptables string match extension, PSAD is capable of detecting many attacks described in the Snort rule set that involve application layer data.

Tags: System Administration: Monitoring, Implemented in: Perl, User Interface: interface::daemon, network::firewall, Networking: Server, Role: Program, Security: security::firewall, security::ids, Purpose: Checking

Other Packages Related to psad

• dep: bsd-mailx [not m68k]

  간단한 메일 사용자 프로그램(MUA)

  or mailx

  virtual package provided by bsd-mailx, heirloom-mailx, mailutils

  or mailutils

  GNU mailutils utilities for handling mail

• dep: default-mta [not avr32, m68k]

  virtual package provided by exim4-daemon-light

  or mail-transport-agent

  virtual package provided by citadel-mta, courier-mta, dma, esmtp-run, exim4-daemon-heavy, exim4-daemon-light, lsb-invalid-mta, masqmail, msmtp-mta, nbsmtp, nullmailer, postfix, qmail-run, sendmail-bin, ssmtp, xmail

• dep: exim4 [avr32]

  metapackage to ease Exim MTA (v4) installation

  or mail-transport-agent

  virtual package provided by citadel-mta, courier-mta, dma, esmtp-run, exim4-daemon-heavy, exim4-daemon-light, lsb-invalid-mta, masqmail, msmtp-mta, nbsmtp, nullmailer, postfix, qmail-run, sendmail-bin, ssmtp, xmail

• dep: iptables

  패킷 필터링과 NAT를 위한 관리자 도구

• dep: libc0.3 (>= 2.3) [hurd-i386]

  임베디드 GNU C 라이브러리: 공유 라이브러리
  also a virtual package provided by libc0.3-udeb

• dep: libc6 (>= 2.11) [powerpcspe]

  임베디드 GNU C 라이브러리: 공유 라이브러리
  also a virtual package provided by libc6-udeb

  dep: libc6 (>= 2.13) [s390x, sh4]

  dep: libc6 (>= 2.13-28) [armhf]

  dep: libc6 (>= 2.3) [amd64, hppa, i386, mips, mipsel, sparc64]

  dep: libc6 (>= 2.4) [armel, powerpc, s390]

  dep: libc6 (>= 2.5) [avr32]

  dep: libc6 (>= 2.5-5) [m68k]

  dep: libc6 (>= 2.6) [sparc]

• dep: libc6.1 (>= 2.3) [ia64]

  임베디드 GNU C 라이브러리: 공유 라이브러리
  also a virtual package provided by libc6.1-udeb

  dep: libc6.1 (>= 2.4) [alpha]

• dep: libcarp-clan-perl

  Perl enhancement to Carp error logging facilities

• dep: libdate-calc-perl

  Perl library for accessing dates

• dep: libiptables-chainmgr-perl

  Perl extension for manipulating iptables policies

• dep: libiptables-parse-perl

  Perl extension for parsing iptables firewall rulesets

• dep: libnet-ip-perl [not avr32, hppa, hurd-i386, m68k, powerpcspe, sparc64]

  Perl extension for manipulating IPv4/IPv6 addresses

• dep: libnetwork-ipv4addr-perl [avr32, hppa, hurd-i386, m68k, powerpcspe, sparc64]

  Perl extension for manipulating IPv4 addresses

• dep: libunix-syslog-perl

  Perl interface to the UNIX syslog(3) calls

• dep: lsb-base (>= 3.0-6) [not m68k]

  Linux Standard Base 4.1 init script functionality

• dep: perl

  래리 월의 Practical Extraction and Report Language

• dep: psmisc

  utilities that use the proc file system

• dep: rsyslog

  신뢰성 높은 시스템 및 커널 로깅 데몬

  or system-log-daemon

  virtual package provided by busybox-syslogd, dsyslog, inetutils-syslogd, rsyslog, socklog-run, sysklogd, syslog-ng, syslog-ng-core

• dep: whois

  intelligent WHOIS client

• rec: bastille

  보안 강화 툴

• sug: bastille [not avr32, m68k]

  보안 강화 툴

• sug: fwsnort

  Snort-to-iptables rule translator

Download psad

Download for all available architectures

Architecture	Version	Package Size	Installed Size	Files
alpha (unofficial port)	2.2-1	194.4 kB	728.0 kB	[list of files]
amd64	2.2-1	193.7 kB	719.0 kB	[list of files]
armel	2.2-1	191.6 kB	715.0 kB	[list of files]
armhf	2.2-1	193.7 kB	709.0 kB	[list of files]
avr32 (unofficial port)	2.1.5-3	175.6 kB	740.0 kB	[list of files]
hppa	2.1.7-1	185.3 kB	768.0 kB	[list of files]
hurd-i386	2.1.7-1+b1	183.4 kB	683.0 kB	[list of files]
i386	2.2-1	193.8 kB	716.0 kB	[list of files]
ia64	2.2-1	198.4 kB	746.0 kB	[list of files]
m68k (unofficial port)	2.1.5-1	176.4 kB	676.0 kB	[list of files]
mips	2.2-1	194.4 kB	718.0 kB	[list of files]
mipsel	2.2-1	196.3 kB	718.0 kB	[list of files]
powerpc	2.2-1	196.4 kB	717.0 kB	[list of files]
powerpcspe (unofficial port)	2.1.7-1	184.4 kB	768.0 kB	[list of files]
s390	2.2-1	190.8 kB	717.0 kB	[list of files]
s390x	2.2-1	191.7 kB	726.0 kB	[list of files]
sh4 (unofficial port)	2.2-1	195.3 kB	716.0 kB	[list of files]
sparc	2.2-1	193.5 kB	715.0 kB	[list of files]
sparc64 (unofficial port)	2.1.7-1.1	184.3 kB	686.0 kB	[list of files]