Package: psad (2.4.3-1.2)

Links for psad

Debian Resources:

Download Source Package psad:

Maintainer:

Franck Joncourt (QA Page)

External Resources:

Homepage [www.cipherdyne.org]

Similar packages:

Port Scan Attack Detector

PSAD is a collection of four lightweight system daemons (in Perl and C) designed to work with iptables to detect port scans. It features:

 * a set of highly configurable danger thresholds (with sensible
   defaults provided);
 * verbose alert messages that include the source, destination,
   scanned port range, beginning and end times, TCP flags, and
   corresponding Nmap options;
 * reverse DNS information;
 * alerts via email;
 * automatic blocking of offending IP addresses via dynamic firewall
   configuration.

When combined with fwsnort and the iptables string match extension, PSAD is capable of detecting many attacks described in the Snort rule set that involve application layer data.

Tags: System Administration: Monitoring, Implemented in: Perl, User Interface: interface::daemon, network::firewall, Networking: Server, Role: Program, Security: security::firewall, security::ids, Purpose: Checking

Other Packages Related to psad

depends

recommends

suggests

enhances

dep: bsd-mailx

simple mail user agent

or mailx

virtual package provided by bsd-mailx, mailutils

or mailutils

GNU mailutils utilities for handling mail
dep: default-mta

virtual package provided by exim4-daemon-light

or mail-transport-agent

virtual package provided by citadel-server, courier-mta, dma, esmtp-run, exim4-daemon-heavy, exim4-daemon-light, msmtp-mta, nullmailer, opensmtpd, postfix, qmail-run, sendmail-bin
dep: iproute2

networking and traffic control tools
dep: iptables

administration tools for packet filtering and NAT
dep: libc6 (>= 2.4)

GNU C Library: Shared libraries
also a virtual package provided by libc6-udeb
dep: libcarp-clan-perl

Perl enhancement to Carp error logging facilities
dep: libdate-calc-perl

Perl library for accessing dates
dep: libiptables-chainmgr-perl

Perl extension for manipulating iptables policies
dep: libiptables-parse-perl

Perl extension for parsing iptables firewall rulesets
dep: libnet-ip-perl

Perl extension for manipulating IPv4/IPv6 addresses
dep: libunix-syslog-perl

Perl interface to the UNIX syslog(3) calls
dep: lsb-base

Linux Standard Base init script functionality
dep: net-tools

NET-3 networking toolkit
dep: perl

Larry Wall's Practical Extraction and Report Language
dep: psmisc

utilities that use the proc file system
dep: rsyslog

reliable system and kernel logging daemon

or system-log-daemon

virtual package provided by busybox-syslogd, inetutils-syslogd, rsyslog, syslog-ng-core
dep: whois

intelligent WHOIS client

sug: fwsnort

Snort-to-iptables rule translator

Download psad

Download for all available architectures
Architecture	Package Size	Installed Size	Files
i386	174.5 kB	720.0 kB	[list of files]