echolot - network station monitor / News: Recent posts

as there have been some feature requests (and still no time to code them) here is a feature list for the next releases:
* arp-scan detection (fsck sentinel;)
* lifetime management
* distributed sniffing
* /etc/echolot.conf
* faster, more flexible database code

may be (comment this):
* xml-support for database
* passive name detection
* gtk-client (like icq's buddy list)
...

i've set up an echolot-website. you can get the latest development releases, howto and some extra information there. the echolot homepage is the main resource by now.

http://www.h07-server.org/~petra/

stable releases will also be announced and hosted at sf.

the initial release of echolot and its childs have been tested on many events. i've used it to check out some servers and someday i've recognized a friend on my console, that was sitting next table;-)

i'm sure that echolot does a fine job at this side, so the future developement will improve its usability to watch your lan for intruders. therefor it is planned to daemonize echolot and to make it to write into syslog. this will probably be done with the 0.1.0 release, so stay tuned.

I've joined a lan party this weekend, when I've recognized someone who was spreading viruses. After I set up a honeypot (world writeable smb share), I had the host in my logs. It was a simple game to check out this hosts mac address and determine the port on one of the switches.