[ 源代码： psad ]
软件包：psad（2.4.3-1.2）
Port Scan Attack Detector
PSAD is a collection of four lightweight system daemons (in Perl and C) designed to work with iptables to detect port scans. It features:
* a set of highly configurable danger thresholds (with sensible defaults provided); * verbose alert messages that include the source, destination, scanned port range, beginning and end times, TCP flags, and corresponding Nmap options; * reverse DNS information; * alerts via email; * automatic blocking of offending IP addresses via dynamic firewall configuration.
When combined with fwsnort and the iptables string match extension, PSAD is capable of detecting many attacks described in the Snort rule set that involve application layer data.
其他与 psad 有关的软件包
|
|
|
|
-
- dep: default-mta
- 本虚包由这些包填实： exim4-daemon-light
- 或者 mail-transport-agent
- 本虚包由这些包填实： citadel-server, courier-mta, dma, esmtp-run, exim4-daemon-heavy, exim4-daemon-light, msmtp-mta, nullmailer, opensmtpd, postfix, qmail-run, sendmail-bin
-
- dep: iproute2
- 网络和流量控制工具
-
- dep: iptables
- 数据包过滤和网络地址转换(NAT)管理工具
-
- dep: libc6 (>= 2.4)
- GNU C 语言运行库：共享库
同时作为一个虚包由这些包填实： libc6-udeb
-
- dep: libcarp-clan-perl
- Perl enhancement to Carp error logging facilities
-
- dep: libdate-calc-perl
- Perl library for accessing dates
-
- dep: libiptables-chainmgr-perl
- Perl extension for manipulating iptables policies
-
- dep: libiptables-parse-perl
- Perl extension for parsing iptables firewall rulesets
-
- dep: libnet-ip-perl
- Perl extension for manipulating IPv4/IPv6 addresses
-
- dep: libunix-syslog-perl
- Perl interface to the UNIX syslog(3) calls
-
- dep: lsb-base
- Linux 标准规范初始化脚本功能
-
- dep: net-tools
- NET-3 networking toolkit
-
- dep: perl
- 拉里 沃尔的实用报表提取语言(Perl)
-
- dep: psmisc
- utilities that use the proc file system
-
- dep: rsyslog
- 可靠的系统和内核日志守护进程
- 或者 system-log-daemon
- 本虚包由这些包填实： busybox-syslogd, inetutils-syslogd, rsyslog, syslog-ng-core
-
- dep: whois
- intelligent WHOIS client
-
- sug: fwsnort
- Snort-to-iptables rule translator