Package: psad (2.4.6-3 and others)

[ Source: psad  ]

Port Scan Attack Detector

PSAD is a collection of four lightweight system daemons (in Perl and C) designed to work with iptables to detect port scans. It features:

 * a set of highly configurable danger thresholds (with sensible
   defaults provided);
 * verbose alert messages that include the source, destination,
   scanned port range, beginning and end times, TCP flags, and
   corresponding Nmap options;
 * reverse DNS information;
 * alerts via email;
 * automatic blocking of offending IP addresses via dynamic firewall
   configuration.

When combined with fwsnort and the iptables string match extension, PSAD is capable of detecting many attacks described in the Snort rule set that involve application layer data.

Tags: System Administration: Monitoring, Implemented in: Perl, User Interface: interface::daemon, network::firewall, Networking: Server, Role: Program, Security: security::firewall, security::ids, Purpose: Checking

Other Packages Related to psad

• dep: init-system-helpers (>= 1.54~)

  모든 init 시스템을 위한 지원 도구

• dep: bsd-mailx

  simple mail user agent

  or mailx

  virtual package provided by bsd-mailx, mailutils

  or mailutils

  GNU mailutils utilities for handling mail

• dep: default-mta

  virtual package provided by exim4-daemon-light

  or mail-transport-agent

  virtual package provided by courier-mta, dma, esmtp-run, exim4-daemon-heavy, exim4-daemon-light, msmtp-mta, nullmailer, opensmtpd, postfix, sendmail-bin, ssmtp

• dep: iproute2

  네트워킹 및 트래픽 제어 도구

• dep: iptables

  administration tools for packet filtering and NAT

• dep: libc6 (>= 2.34) [not arm64]

  GNU C 라이브러리: 공유 라이브러리
  also a virtual package provided by libc6-udeb

  dep: libc6 (>= 2.38) [arm64]

• dep: libcarp-clan-perl

  Perl enhancement to Carp error logging facilities

• dep: libdate-calc-perl

  Perl library for accessing dates

• dep: libiptables-chainmgr-perl

  Perl extension for manipulating iptables policies

• dep: libiptables-parse-perl

  Perl extension for parsing iptables firewall rulesets

• dep: libnet-ip-perl

  Perl extension for manipulating IPv4/IPv6 addresses

• dep: libunix-syslog-perl

  Perl interface to the UNIX syslog(3) calls

• dep: lsb-base

  리눅스 표준 베이스 init 스크립트 기능용 전환 패키지

• dep: net-tools

  NET-3 네트워킹 툴킷

• dep: perl

  래리 월의 Practical Extraction and Report Language

• dep: psmisc

  proc 파일 시스템을 사용하는 유틸리티

• dep: rsyslog

  신뢰성 높은 시스템 및 커널 로깅 데몬

  or system-log-daemon

  virtual package provided by busybox-syslogd, inetutils-syslogd, metalog, rsyslog, socklog-run, syslog-ng-core

• dep: whois

  지능형 WHOIS 클라이언트

• sug: fwsnort

  Snort-to-iptables rule translator

Download psad

Download for all available architectures

Architecture	Version	Package Size	Installed Size	Files
amd64	2.4.6-3+b1	167.4 kB	732.0 kB	[list of files]
arm64	2.4.6-3+b3	167.3 kB	816.0 kB	[list of files]
armhf	2.4.6-3+b1	166.1 kB	714.0 kB	[list of files]
i386	2.4.6-3+b1	168.2 kB	730.0 kB	[list of files]
ppc64el	2.4.6-3+b1	170.0 kB	816.0 kB	[list of files]
riscv64	2.4.6-3+b1	167.8 kB	724.0 kB	[list of files]
s390x	2.4.6-3+b1	166.9 kB	724.0 kB	[list of files]