Package: psad (2.2-3.1)

[ Source: psad  ]

Port Scan Attack Detector

PSAD is a collection of four lightweight system daemons (in Perl and C) designed to work with iptables to detect port scans. It features:

 * a set of highly configurable danger thresholds (with sensible
   defaults provided);
 * verbose alert messages that include the source, destination,
   scanned port range, beginning and end times, TCP flags, and
   corresponding Nmap options;
 * reverse DNS information;
 * alerts via email;
 * automatic blocking of offending IP addresses via dynamic firewall
   configuration.

When combined with fwsnort and the iptables string match extension, PSAD is capable of detecting many attacks described in the Snort rule set that involve application layer data.

Tags: System Administration: Monitoring, Implemented in: Perl, User Interface: interface::daemon, network::firewall, Networking: Server, Role: Program, Security: security::firewall, security::ids, Purpose: Checking

Other Packages Related to psad

• dep: bsd-mailx

  jednoduchý používateľský poštový agent (MUA)

  or mailx

  virtual package provided by bsd-mailx, heirloom-mailx, mailutils

  or mailutils

  GNU mailutils utilities for handling mail

• dep: default-mta

  virtual package provided by exim4-daemon-light

  or mail-transport-agent

  virtual package provided by citadel-mta, courier-mta, esmtp-run, exim4-daemon-heavy, exim4-daemon-light, lsb-invalid-mta, masqmail, msmtp-mta, nullmailer, postfix, qmail-run, sendmail-bin, ssmtp, xmail

• dep: iptables

  nástroje na správu filtrovania paketov a NAT

• dep: libc6 (>= 2.13-28)

  knižnica Embedded GNU C - zdieľané knižnice
  also a virtual package provided by libc6-udeb

• dep: libcarp-clan-perl

  Perl enhancement to Carp error logging facilities

• dep: libdate-calc-perl

  Perl library for accessing dates

• dep: libiptables-chainmgr-perl

  Perl extension for manipulating iptables policies

• dep: libiptables-parse-perl

  Perl extension for parsing iptables firewall rulesets

• dep: libnet-ip-perl

  Perl extension for manipulating IPv4/IPv6 addresses

• dep: libunix-syslog-perl

  Perl interface to the UNIX syslog(3) calls

• dep: lsb-base (>= 3.0-6)

  funkcionalita init skriptov pre Linux Standard Base 4.1

• dep: perl

  Practical Extraction and Report Language Larryho Walla

• dep: psmisc

  nástroje využívajúce súborový systém proc

• dep: rsyslog

  spoľahlivý démon na záznam správ systému a jadra

  or system-log-daemon

  virtual package provided by busybox-syslogd, dsyslog, inetutils-syslogd, rsyslog, socklog-run, syslog-ng-core

• dep: whois

  inteligentný klient WHOIS

• sug: bastille

  Package not available

• sug: fwsnort

  Snort-to-iptables rule translator

Download psad

Download for all available architectures

Architecture	Package Size	Installed Size	Files
armhf	195.9 kB	710.0 kB	[list of files]