Stateful Packet

Hogwash is an inline packet scrubber that uses Snorts detection engine to drop malicious packets before they reach the target. The original version of what is now hogwash was written in 1996 while I was at Idaho State University. I had a web server that when patched, broke the software it... Platforms: *nix

Uruk is an iptables firewall script that is useful if you need similar packet filtering configurations on multiple machines. It uses a template file for source addresses and network services. Next are the generic installation instructions. The `configure shell script attempts to guess correct... Platforms: *nix

Userfriendly Iptables Frontend provides a tool for generating optimized packet filter rules. The Userfriendly Iptables Frontend is used to generate optimized iptables packet filter rules, using a simple description file specified by the user. Generated rules are provided in iptables- save... Platforms: *nix

Pixilate is a commandline packet generation utility that reads Cisco PIX 6.2x or Cisco IOS ACLs as input and generates the appropriate packets. pixilate is currently capable of generating TCP/UDP/ICMP (various ICMP types), and IGMP utilizing the Libnet 1.1.x library available from... Platforms: *nix

cdpr is used to decode a Cisco Disovery Protocol (CDP) packet, by default it will report the device ID, the IP Address (of the device), and the port number that the machine is connected to. Optionally it will decode the entire CDP packet. This version provides the ability to include a timeout... Platforms: *nix

SekHost is a host based firewall and packet prioritization utility for Linux systems. The configuration is simple yet powerful functionality is available. Installation of sekhost is very straightforward and actually only requires 2 things; the sekhost script itself, which is in the src... Platforms: *nix

packETH is a Linux GUI packet generator tool for ethernet. The project allows you to create and send any possible packet or sequence of packets on the ethernet.. Platforms: *nix

jNetPcap project is a Java wrapper around the Libpcap network packet capture library. The low-level API is exposed in Java, which allows kernel buffer tuning, flags, and other features. All captured packet buffers are wrapped, not copied, in efficient java.nio.ByteBuffer and delivered to Java... Platforms: *nix

interfaceTrafcalc calculates the size of the TCP-payload on a system via packet capturing and connection tracking at the user level instead of the IP level. The program uses a pcap (a library for Packet CAPturing) callback function which is called for every incoming (tcp) packet. This function... Platforms: *nix

fwknop stands for the "FireWall KNock OPerator", and implements an authorization scheme based around Netfilter and libpcap that requires only a single encrypted packet in order to communicate various pieces of information including desired access through a Netfilter policy and/or complete... Platforms: *nix

fl0p is a passive L7 flow fingerprinter that examines TCP/UDP/ICMP packet sequences. It can also can peek into cryptographic tunnels, can tell human beings and robots apart, and performs a couple of other infosec-related tricks. This approach differs from the techniques used by most other... Platforms: *nix

Hafiye is a POSIX-compliant, customizable TCP/IP packet sniffer. When I looked at the source code for various famous sniffers, Ive noticed that they all had all seperate .C files for interpreting various protocols. Why not have a sniffer that can understand user-supplied protocol details? Here it... Platforms: *nix

CGI::FormBuilder is a Perl module to easily generate and process stateful forms. SYNOPSIS use CGI::FormBuilder; # Assume we did a DBI query to get existing values my $dbval = $sth->fetchrow_hashref; # First create our form my $form = CGI::FormBuilder->new( name => acctinfo, method =>... Platforms: *nix

The SR-RTP library enables real-time streaming applications (such as streaming MPEG-4 video) to cope with packet loss, variable bandwidth, and variable delay on the Internet. It provides a means for selective retransmission of lost packets in a fashion that is backwards-compatible with RTP.... Platforms: *nix

Frickin PPTP Proxy is a fast PPTP proxy for any BSD system with the OpenBSD packet filter installed. It handles bi-directional tunnels transparently and can be chained from one proxy to another over several servers. Whats New in This Release: - This release fixes an endian issue with echo... Platforms: *nix

CGI::MxScreen is a multi-screen stateful CGI framework. SYNOPSIS require CGI::MxScreen; my $manager = CGI::MxScreen->make( -bgcolor => "#dedeef", -screens => { "state_1" => [-class => "STATE_1", -title => "Hello"], "state_2" => [-class => "STATE_2", -title => "Hello #2"], },... Platforms: *nix

conexus is a generalized C++ I/O library that includes support for BSD sockets, serial/TTY, and packet capture (via pcap). conexus library utilizes sigc++ for object communication. A companion library, conexusgtk, provides a set of gtkmm widgets.. Platforms: *nix

RPCAP is a Remote Packet Capture system. It enables you to run a packet capture program (the server) on a target computer, which will sniff the network traffic on that system, and uplink the captured packets to another host (the client), where the captured packets can be processed, analysed and... Platforms: *nix

hping is a command-line oriented TCP/IP packet assembler/analyzer. The interface is inspired to the ping(8) unix command, but hping isnt only able to send ICMP echo requests. It supports TCP, UDP, ICMP and RAW-IP protocols, has a traceroute mode, the ability to send files between a covered... Platforms: *nix

tcptrack provides a packet sniffer that displays TCP connections similarly to top. tcptrack is a packet sniffer, which passively watches for connections on a specified network interface, tracks their states, and lists them in a manner similar to the Unix top command. It displays source and... Platforms: *nix