Пакет: scanlogd (2.2.8-0.1)

Portscan Detecting Tool

Scanlogd is a TCP port scan detection tool, originally designed to illustrate various attacks an IDS developer has to deal with, for a Phrack Magazine article. Thus, unlike some of the other port scan detection tools out there, scanlogd is designed to be totally safe to use.

This release of scanlogd can be built with support for one of several packet capture interfaces. In addition to the raw socket interface on Linux (which does not require any libraries), scanlogd is now aware of libnids and libpcap.

Debian's version of scanlogd has been configured to use the raw socket interface on Linux.

Теги: Системное администрирование: Мониторинг, Реализовано на: C, Пользовательский интерфейс: interface::daemon, network::server, Роль: Программа, Безопасность: Обнаружение вторжения, Цель: use::monitor, works-with::logfile, Работает с: Сетевой трафик

Эта страница также доступна на следующих языках (Как установить язык по умолчанию):