all options
squeeze  ] [  wheezy  ] [  jessie  ] [  sid  ]
[ Source: psad  ]

Package: psad (2.1.7-1)

Links for psad

Screenshot

Debian Resources:

Download Source Package psad:

Maintainers:

External Resources:

Similar packages:

Port Scan Attack Detector

PSAD is a collection of four lightweight system daemons (in Perl and C) designed to work with iptables to detect port scans. It features:

 * a set of highly configurable danger thresholds (with sensible
   defaults provided);
 * verbose alert messages that include the source, destination,
   scanned port range, beginning and end times, TCP flags, and
   corresponding Nmap options;
 * reverse DNS information;
 * alerts via email;
 * automatic blocking of offending IP addresses via dynamic firewall
   configuration.

When combined with fwsnort and the iptables string match extension, PSAD is capable of detecting many attacks described in the Snort rule set that involve application layer data.

Tags: System Administration: Monitoring, Implemented in: Perl, User Interface: Daemon, Networking: Firewall, Server, Role: Program, Security: Firewall, Intrusion Detection, Purpose: Checking

Other Packages Related to psad

  • depends
  • recommends
  • suggests
  • enhances

Download psad

Download for all available architectures
Architecture Package Size Installed Size Files
amd64 182.8 kB680.0 kB [list of files]
armel 186.8 kB764.0 kB [list of files]
i386 183.8 kB768.0 kB [list of files]
ia64 189.7 kB796.0 kB [list of files]
kfreebsd-amd64 183.7 kB700.0 kB [list of files]
kfreebsd-i386 182.1 kB696.0 kB [list of files]
mips 189.1 kB776.0 kB [list of files]
mipsel 183.9 kB776.0 kB [list of files]
powerpc 183.7 kB768.0 kB [list of files]
s390 183.4 kB768.0 kB [list of files]
sparc 183.3 kB768.0 kB [list of files]