Linux Software / Network & Internet / Networking Tools

Hogwash 0.5

Date Added: May 08, 2010 | Visits: 1.796

Report Broken Link
Printer Friendly Version

Product Homepage
Download (103 downloads)

Hogwash is an inline packet scrubber that uses Snorts detection engine to drop malicious packets before they reach the target. The original version of what is now hogwash was written in 1996 while I was at Idaho State University. I had a web server that when patched, broke the software it needed to run. The box was being taken over every other day so I wrote the very first version of hogwash to filter out the offending packets and name it Scrub. A bunch of other admins were having the same problem so I distributed Scrub and patches started showing up in my mailbox. It became obvious that some sort of rules language was going to be needed. Over the weekend I wrote the original Cheap and Dirty detection engine. The summer of 1999 I had an intership at the Idaho National Enviromental and Engineering Labs. They used Snort extensively. I liked the simple layout of Snort so I welded it into Scrub in place of the Cheap and Dirty engine and renamed the project to SnortScrub. I left the INEEL to work for a startup in the dot-com era. The marketing department considered a commercial version of SnortScrub, but didnt like the name. SnortScrub got renamed to Hogwash as the stackless control channel and other goodies were added to it. Around this time, Hogwash began to fragment as people needed custom functionality, there were a couple of dozen incompatible versions of Hogwash that were all being maintained seperately. Development of the public version ground to a halt. As features were added, the Snort engine was showing its weaknesses for doing heavyweight packet scrubbing. The decision was made for resurrecting the old Cheap and Dirty engine and just put a snort compatibility layer on top of it. That pretty much brings us up to date. The newly dubbed H2 engine will be in final release in the next couple of months.. SourceForge.net. Fast, secure and free downloads from the largest Open Source applications and software directory.

Requirements: No special requirements

Platforms: Linux

Keyword: Detection, Engine, Hogwash, Networking, Packet, Packets, Snort, Snortscrub, System

Users rating: 0/10

License: Freeware

Size: 194.56 KB

USER REVIEWS

More Reviews or Write Review

HOGWASH RELATED

Networking Tools - Pads 1.2 Pads (Passive Asset Detection System) is a signature-based detection engine used to passively detect network assets. Asset management is an important factor in information security. A good security administrator should keep track of all devices...	235.52 KB
Utilities - CPU-Z 1.4 CPU-Z is a freeware detection program, based on the Panopsys hardware detection engine, that allows you to get some info on your computer. CPU-Z also provides several tools for a complete report, that includes CPUID, MSR, PCI device list, SPD,...	432 KB
Virus Removers - SanityCheck 2.02.20230504 SanityCheck is an advanced rootkit and malware detection tool for Windows which thoroughly scans the system for threats and irregularities which indicate malware or rootkit behavior. By making use of special deep inventory techniques, this program...
Network & Internet - ultimix for Linux 1.5.241 ultimix is a web development framework for developing web-based applications (CMS, portals, ERPs etc.). It includes multilanguage support, permits management, MVC mini framework, package structure, template engine, javascript library, simple GUI...	10 MB
Networking Tools - Basic Analysis and Security Engine 1.2 BASE is the Basic Analysis and Security Engine. It is based on the code from the Analysis Console for Intrusion Databases (ACID) project. This application provides a web front-end to query and analyze the alerts coming from a SNORT IDS system....	337.92 KB
Networking Tools - Yavipind 0.9.6 Yavipind is a secure tunnel aka 2 peers securely forwarding packets toward each other. It forwards any kind of packet (IPv4, IPv6 or other) sent over the virtual point-to-point device (e.g. tun0). It fully runs in linux userspace. yavipin has...	88.06 KB
Utilities - snort_inline 2.8.2.1 Snort_inline is a modified version of Snort. It accepts packets from iptables, instead of libpcap. It uses new rule types to tell iptables if the packet should be dropped or allowed to pass based on the Snort rules.	4.69 MB
Text Chat Clients - Aimwatch 0.9.1 beta Aimwatch is a packet sniffer designed to reconstruct AOL Instant Messenger and ICQ information by passively collecting packets from the network..	32.77 KB
Libraries - Packet Construction Set 0.5 Beta Packet Construction Set is a set of Python modules and objects that make building network protocol code easier for the protocol developer. The core of the system is the pcs module itself which provides the necessary functionality to create...	368.64 KB
Networking Tools - TNV 0.3.7 TNV stands for The Network Visualizer or Time-based Network Visualizer and depicts network traffic by visualizing packets and links between local and remote hosts. TNV is intended for network traffic analysis to facilitate learning what...

NEW DOWNLOADS IN NETWORK & INTERNET, NETWORKING TOOLS

Network & Internet - Free WiFi Hotspot 3.3.1 Free WiFi Hotspot is a super easy solution to turn your laptop or notebook into a portable Wi-Fi hotspot, wirelessly sharing your internet connections like DSL, Cable, Bluetooth, Mobile Broadband Card, Dial-Up, etc. through the built-in wireless...	1.04 MB
Network & Internet - Easy Uploads 1.8 Easy uploads is a file storage media streaming application designed by Filestreamers that allows you to upload, store, and stream your files from their virtually unlimited file storage server. Easy Uploads can backup,share, and stream your files...	615.97 KB
Network & Internet - PacketFence ZEN 3.1.0 PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) system. Boosting an impressive feature set including a captive-portal for registration and remediation, centralized wired and wireless management, 802.1X...	1024 MB
Network & Internet - django-dbstorage 1.3 A Django file storage backend for files in the database.	10.24 KB
Network & Internet - SQL Inject Me 0.4.5 SQL Inject Me is a Firefox extension used to test for SQL Injection vulnerabilities. The tool works by submitting your HTML forms and substituting the form value with strings that are representative of an SQL Injection attack.	133.12 KB
Networking Tools - gvrpad 0.1 gvrpad is a daemon that makes GVRP announcements of all VLAN interfaces on a FreeBSD system. GVRP is the GARP VLAN Registration Protocol, defined in IEEE 802.1Q (VLANS); GARP is the Generic Attribute Registration Protocol, defined in 802.1D...	15.36 KB
Networking Tools - Cheops 0.61 Cheops is an Open Source Network User Interface. It is designed to be the network equivalent of a swiss-army knife, unifying your network utilities. Cheops is for the network what a file manager is for your filesystem..	317.44 KB
Networking Tools - ssh tunnel on demand 1.0 ssh tunnel on demand provides a script that creates an SSH tunnel on demand. ssh tunnel on demand is a script that makes it possible for a user to create an SSH tunnel to a server and connect to it without needing an account on the box or any...	13.31 KB
Networking Tools - strongSwan 4.1.5 strongSwan is an OpenSource IPsec implementation for the Linux operating system. strongSwan is an OpenSource IPsec implementation for the Linux operating system. In order to have a stable IPsec platform to base our future extensions of the X.509...	1.7 MB
Networking Tools - triggers 0.41 trigger is a lightweight, asynchronous notification mechanism to set off events in and across systems. The poor mans daily snapshot, glastree builds live backup trees, with branches for each day. Users directly browse the past to recover older...	14.34 KB

Windows Software	BeOS Software
Macintosh Software	Linux Software
PDA Software	OS/2 Software
Mobile Software	Scripts