PSAD |
||||||||||||||||||||
|
Description
PSAD is a collection of four lightweight system daemons (in Perl and C) designed to work with iptables to detect port scans. It features:
* a set of highly configurable danger thresholds (with sensible defaults provided); * verbose alert messages that include the source, destination, scanned port range, beginning and end times, TCP flags, and corresponding Nmap options; * reverse DNS information; * alerts via email; * automatic blocking of offending IP addresses via dynamic firewall configuration. When combined with fwsnort and the iptables string match extension, PSAD is capable of detecting many attacks described in the Snort rule set that involve application layer data. |
||||||||||||||||||||
|
Home Page: http://www.cipherdyne.org/
|
||||||||||||||||||||
|
Interface: Command Line
|
||||||||||||||||||||
|
Associated Programs
|
||||||||||||||||||||
|
Available deb Repositories (how-to add a respository)
|
||||||||||||||||||||
|
Rating: Not Rated (0 votes)
Login or Register to rate PSAD, add a Tag, or designate as an alternative to a Windows app |
|
|
Upload Screenshots
Images must be in GIF, JPG, or PNG formats and can be no larger than 2 MB. Only one file can be uploaded at a time. A description can be included, but it is optional.
|
|
|
Submit Web Links
Submit the title and link (including http://) to an article pertaining to PSAD and it will appear in the Web Links section of the right banner. Contact us here if an entry needs to be removed.
|
|


Recent comments
30 weeks 4 days ago
42 weeks 3 days ago
43 weeks 1 day ago
44 weeks 10 hours ago
1 year 2 weeks ago
1 year 27 weeks ago
1 year 50 weeks ago
1 year 50 weeks ago
1 year 50 weeks ago
1 year 51 weeks ago