|
|
| Distribution |
Debian testing |
| Abteilung |
admin |
| Quelle |
psad |
| Version |
2.1.5-3 |
| Maintainer |
Franck Joncourt <franck@debian.org>
|
| Beschreibung |
PSAD is a collection of four lightweight system daemons (in Perl and
C) designed to work with iptables to detect port scans. It features:
* a set of highly configurable danger thresholds (with sensible
defaults provided);
* verbose alert messages that include the source, destination,
scanned port range, beginning and end times, TCP flags, and
corresponding Nmap options;
* reverse DNS information;
* alerts via email;
* automatic blocking of offending IP addresses via dynamic firewall
configuration.
.
When combined with fwsnort and the iptables string match extension,
PSAD is capable of detecting many attacks described in the Snort rule
set that involve application layer data.
|
| Abhängig von | iptables, libc6 (>= 2.3), libcarp-clan-perl, libdate-calc-perl, libiptables-chainmgr-perl, libiptables-parse-perl, libnetwork-ipv4addr-perl, libunix-syslog-perl, lsb-base (>= 3.0-6), perl, psmisc, whois, rsyslog | system-log-daemon, exim4 | mail-transport-agent, bsd-mailx | mailutils | mailx | | Recommends | bastille | | Vorgeschlagen | fwsnort | | Kollidiert mit | bastille (< < 1:1.3.0-4) |
| Offizielle Seiten |
Paket
Entwicklerinformationen
Bugs (Binärpaket)
Bugs (Quellpaket) |
| Download |
amd64 |
|
|
|
