Skip to content
Sections
>> Trisquel >> Balíky >> aramo >> admin >> psad
etiona  ] [  nabia  ] [  aramo  ]
[ Zdroj: psad  ]

Balík: psad (2.4.6-2)

Port Scan Attack Detector

PSAD is a collection of four lightweight system daemons (in Perl and C) designed to work with iptables to detect port scans. It features:

 * a set of highly configurable danger thresholds (with sensible
   defaults provided);
 * verbose alert messages that include the source, destination,
   scanned port range, beginning and end times, TCP flags, and
   corresponding Nmap options;
 * reverse DNS information;
 * alerts via email;
 * automatic blocking of offending IP addresses via dynamic firewall
   configuration.

When combined with fwsnort and the iptables string match extension, PSAD is capable of detecting many attacks described in the Snort rule set that involve application layer data.

Ostatné balíky súvisiace s balíkom psad

  • závisí
  • odporúča
  • navrhuje
  • sug: fwsnort
    Snort-to-iptables rule translator

Stiahnuť psad

Stiahnuť pre všetky dostupné architektúry
Architektúra Veľkosť balíka Nainštalovaná veľkosť Súbory
amd64 150.9 kB714 kB [zoznam súborov]
arm64 150.4 kB706 kB [zoznam súborov]
armhf 149.4 kB696 kB [zoznam súborov]
ppc64el 159.7 kB798 kB [zoznam súborov]