Packet Filtering

Aquarium is an open source text filtering package written in PHP. It filters nearly all four-letter words, profanities, curses, and pornographic language from any text, while filtering nearly no benign words. It can keep your blog, forum, guestbook or other dynamic application clean and suitable... Platforms: *nix

Imager::Filters is an entire image filtering operations. SYNOPSIS use Imager; $img = ...; $img->filter(type=>autolevels); $img->filter(type=>autolevels, lsat=>0.2); $img->filter(type=>turbnoise) # and lots of others load_plugin("dynfilt/dyntest.so") or die "unable to load pluginn";... Platforms: *nix

pflogx is a simple tool that exports OpenBSD packet filter logs to XML files. pflogx reads a binary log file generated by the pf logging daemon (pflogd) and generates a human-readable and exploitable XML file. Using an XSLT processor you can convert this XML file to any other format, such as... Platforms: *nix

ebtables is a filtering tool for a bridging firewall. A firewalling tool to transparently filter network traffic passing a bridge. The filtering possibilities are limited to link layer filtering and some basic filtering on higher network layers. Advanced logging, MAC DNAT/SNAT and brouter... Platforms: *nix

Crypt::OpenPGP::Plaintext is a plaintext, literal-data packet. SYNOPSIS use Crypt::OpenPGP::Plaintext; my $pt = Crypt::OpenPGP::Plaintext->new( Data => $data, Filename => $file, ); my $serialized = $pt->save; my $pt = Crypt::OpenPGP::Plaintext->parse($buffer);... Platforms: *nix

PacGen is an Ethernet IP TCP/UDP packet generating tool for Linux. Experimental ARP generation is included. Experimental ARP generation is included. This tool enables custom packets with configurable Ethernet, IP, TCP, and UDP layers as well as custom payloads. As an added feature there are... Platforms: *nix

fwlogwatch is a packet filter / firewall / IDS log analyzer written by Boris Wesslowski originally for RUS-CERT. fwlogwatch supports a lot of log formats and has many analysis options. It also features incident report and realtime response capabilities, an interactive web interface and... Platforms: *nix

Sniffit is a packet sniffer for TCP, UDP and ICMP packets. sniffit is able to give you very detailed technical info on these packets (SEQ, ACK, TTL, Window etc.) but also packet contents in different formats (hex or plain text). Sniffit was actually the start of my TCP/IP experimental phase. As... Platforms: *nix

TiVoBridge is a packet repeater for both the TiVo discovery beacon and Multicast DNS (used in ZeroConf, Bonjour, Rendevous, etc.) protocols. The project is intended as a way for TiVo boxes and other devices or programs that use either of those (normally single-subnet) protocols to see each other... Platforms: *nix

mod_activex_filter is an Apache module that enables ActiveX filtering for Apache proxy. This module is a small example of an Output Filter developed for Apache 2.0.44 and tested up to 2.0.46. Its only a simple hack of mod_case_filter to get a way to filter ActiveX on a proxy. Actualy, the... Platforms: *nix

Radical is a simple Radius packet decoder to assist in the debugging of Radius sessions. It accepts the output of the Solaris snoop(1M) command and it is written in Python. language.. Platforms: *nix

Poprox is a POP3 and SMTP transparent filtering proxy. The project does virus scanning using libclamav and is comparable to p3scan in philosophy. Its design is based on a multi-process architecture which allows the detection of libclamav crashes. When this occurs, Poprox is able to delete the... Platforms: *nix

FifoEmbed is a thread-safe basic queue, packet queue, and FIFO allocator. When programming device drivers, network stacks, and similar systems, you often need a queue and storage management. FifoEmbed provides three C abstract data types, all implemented on top of circular arrays: - A basic... Platforms: *nix

mod_dnsbl is an Apache module for content filtering based on DNS blacklists. mod_dnsbl is a blacklisting module for the apache proxy. It uses the DNS as a distributed database for blacklist data. In addition to simple block/pass decisions, it can also override authentication or virus scanning... Platforms: *nix

Nest provides a secure IP VPN cryptographically protected packet tunnel. Nest is a secure IP VPN tunnel for FreeBSD. It connects two LANs over an insecure WAN. Nest works on the IP packet level. Its features include packet authentication and integrity checking (with 96-bit SHA1-derived HMAC),... Platforms: *nix

Gspoof is a GTK+ program written in C language which makes easier and accurate the building and the sending of TCP packet with a data-payload or not. It's possible to modify TCP/IP fields also Ethernet header working to Link Level. Platforms: Windows, Mac, *nix, C/C++, BSD Solaris

Nast is a packet sniffer and a LAN analyzer based on Libnet and Libpcap. It can sniff in normal mode or in promiscuos mode the packets on a network interface and log it. It dumps the headers of packets and the payload in ascii or ascii-hex format. You can apply a filter. The sniffed data can be... Platforms: *nix

IPFIRE-wall is an IPv4 Packet Filter with Network Address Translation capabilities. It can be used in desktop systems and in simple network configurations, providing a friendly interface and a simple installation. Also unprivileged users can personalize. Whats New in This Release: Kernel:... Platforms: *nix

junkfilter is a procmail-based spam filtering system that is both configurable and customizable. Procmail is a popular and powerful mail-processing program available for nearly all Unix systems. This means that junkfilter doesnt work on Windows, AOL, Hotmail, Yahoo! Mail, Juno, WebTV, or any... Platforms: *nix

packet2sql converts any text file/log file which contains ipchains packet logs into a stream of SQL inserts. If called with no options, packet2sql will read the log input from stdin. Since syslog dates do not include the year, packet2sql will assign one. If the month of a log entry comes after... Platforms: *nix