Snort

psad is a collection of three lightweight system daemons (two main daemons and one helper daemon) that run on Linux machines and analyze Netfilter log messages to detect port scans and other suspicious traffic. psad incorporates many signatures from the Snort intrusion detection system to...

EasyIDS software is an easy to install intrusion detection system configured for Snort. Based upon Patrick Harpers Snort installation guide and modeled after the trixbox installation cd, EasyIDS is designed for the network security beginner with minimal Linux experience. Whats New in This...

The SLC Security console is an integrated security console that supports Snort, Intruvert and Dragon IDS monitoring. Linksys wireless routers, Linux and Windows syslog devices for security events. The software provides lookup information and email notifications as well as reporting capabilities.


Platforms: Windows

phpSAM is a tool written in PHP intended to handle the events logged by snort(snort.org) in MySQL.There is being worked on making graphs more intuitive.For an update on the progress, please do not hesitate to visit phpsam.sf.net


Platforms: Windows, Mac, Linux

A java-based 3D Visualisation tool for MySQL data logged by snort, for either log analysis or alert monitoring. The program requires an installation of snort+mysql, and works with either the sun or black-down versions of java + java 3D.


Platforms: Windows, Mac, Linux

Snort2Pf is a small Perl daemon which greps Snort's alertfile and blocks the 'naughty' hosts for a given amount of time using pfctl.


Platforms: Mac, BSD, Linux

This project is an attempt to redesign the snort database schema and to provide a new analysis frontend and associated tools.


Platforms: Windows, Mac, Linux

About HenWen A network security package for Mac OS X that makes it easy to configure and run Snort, a free Network Intrusion Detection System (NIDS). HenWen s goal is to simplify setting up and maintaining software that will scan network traffic for undesirable traffic a firewall may not block....


Platforms: Mac

REMARK is a unified security package that allows for administration of: snort, firewalls, attackers, hosts, bandwidth, proxies.


Platforms: Windows, Mac, *nix, PHP, BSD Solaris

IDSRG stands for Intrusion Detection System Report Generator. It generates graphic reports from a snort database of alerts.The main goal of the project IDS Report Generator is to provide instant reports of your ids events. It has 7 predefined reports and the plans.


Platforms: PHP

OpenAanval - The Open Source version of the Commercial Aanval Console - A full featured advanced Intrusion Detection System (IDS) Console for Snort.Real-time LIVE event monitoring, comprehensive statistics, multi-user, email / audio alerting, IP marking.


Platforms: PHP

The Ungoliant network filter is a system utilizing open-sourced backends to isolate problematic (virus-infected or otherwise) hosts from a network.Focuses on vpmsd, snort, and nmap for detection and containment.


Platforms: PHP

PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) system. Boosting an impressive feature set including a captive-portal for registration and remediation, centralized wired and wireless management, 802.1X support, layer-2 isolation of problematic devices,...


Platforms: *nix

This is a port of FreeBSD divert socket mechanism to linux. This works in conjunction with IPtables and sends packets to user space. Similar to ip_queue but allows any number of unique user space listeners, such as Snort.


Platforms: *nix

PacketStuff Network Toolkit contains a set of very well-known tools for network analysis, fingerprinting, trafiic monitoring, etc.: ethereal, nmap, ngrep, tcpdump... All these tools are compiled with Packet Sniffer SDK, so you can launch them from any (removable) disk. Installation of the WinPCap...


Platforms: Windows

The Firewall Tester (FTester) is a tool designed for testing firewalls filtering policies and Intrusion Detection System (IDS) capabilities.The tool consists of two perl scripts, a packet injector (ftest) and the listening sniffer (ftestd). The first script injects custom packets, defined in...


Platforms: *nix

FTester (The Firewall Tester) is a tool designed for testing firewalls filtering policies and Intrusion Detection System (IDS) capabilities. The tool consists of two perl scripts, a packet injector (ftest) and the listening sniffer (ftestd). The first script injects custom packets, defined in...


Platforms: *nix

Annvix is a secure Linux server distribution. The goal is to provide an easy-to-use server distribution with high security features including a secure kernel, gcc with SPP stack protection patches, and secure defaults for all services. It also includes unique features such as running all...


Platforms: *nix

The Auditor security collection is a Live-System based on KNOPPIX. With no installation whatsoever, the analysis platform is started directly from the CD-Rom and is fully accessible within minutes. Independent of the hardware in use, the Auditor security collection offers a standardised working...


Platforms: *nix

OSSIM aims to unify network monitoring, security, correlation, and qualification in one single tool. The project combines Snort, BASE, NTOP, Nagios, nmap, nessus, and rrdtool to provide the user with full control over every aspect of networking or security..


Platforms: *nix