Share

mon

Tracker: Patches

5 new monitor: worm/network scan detector for ipchains gateway - ID: 825552
Last Update: Attachment added ( mca-gdl )

General purpose monitor, periodically runs "ipchains -M
-L -n" to find out which machines are masquerading
through the gateway. Sources that seem to be hitting a
lot of different destinations all at once are flagged.

Monitor successfully notified us of a W32.Nachia
infection this morning.

Release under GPL from Granta Design approved by Paddy
Clark.


Matthew Astley ( mca-gdl ) - 2003-10-17 15:19

5

Open

None

Nobody/Anonymous

None

None

Public


Comment ( 1 )




Date: 2003-10-17 15:21
Sender: mca-gdl

Logged In: YES
user_id=144698

(odd, the patch file upload didn't work... try again)


Log in to comment.

Attached File ( 1 )

Filename Description Download
mon_masq_netscan.monitor anti-netscan monitor Download

Change ( 1 )

Field Old Value Date By
File Added 64636: mon_masq_netscan.monitor 2003-10-17 15:23 mca-gdl