Search Results for "c kernel"

Osquery is an operating system instrumentation framework for Windows, OS X (macOS), Linux, and FreeBSD. The tools make low-level operating system analytics and monitoring both performant and intuitive. Osquery exposes an operating system as a high-performance relational database. This allows you to write SQL queries to explore operating system data. With osquery, SQL tables represent abstract concepts such as running processes, loaded kernel modules, open network connections, browser...

ttyrpld is a multi-OS kernel-level TTY keylogger and screenlogger with (a)synchronous replay support. It runs on Linux, Solaris, FreeBSD, NetBSD and OpenBSD.

Syslogd2 is a syslog daemon that has been completely re-imagined specifically for use in network environments. It is multi-threaded, scalable and versatile with features designed for both network and host managers. Each Syslogd2 binary is customized from a set of over 20 features at compile-time. It can support input from text files, named-pipes, Linux kernel and user-defined Linux and (both IPv4 and IPv6) IP sockets (both UDP and TCP). It provides a pre-loadable name-cache that can...

A Linux kernel module to grab keys pressed in the keyboard, or a keylogger. keysniffer was initially written with the US keyboard (and conforming laptops) in mind. By default it shows human-readable strings for the keys pressed. However, as keyboards evolved, more keys got added. So the module now supports a module parameter codes which shows the keycode shift_mask pair in hex (codes=1) or decimal (codes=2). You can lookup the keycodes in /usr/include/linux/input-event-codes.h. The...

ClamFS is a FUSE-based user-space file system for Linux with on-access anti-virus file scanning through clamd daemon. ClamFS has moved to Github. Please navigate to github.com/burghardt/clamfs.

NXLog is a modular, multi-threaded, high-performance log management solution with multi-platform support. In concept it is similar to syslog-ng or rsyslog but is not limited to unix/syslog only. It can collect logs from files in various formats, receive logs from the network remotely over UDP, TCP or TLS/SSL . It supports platform specific sources such as the Windows Eventlog, Linux kernel logs, Android logs, local syslog etc. Writing and reading logs to/from databases is also supported....

nf_quota is an ip-based traffic accounting project. IPs can be added to users. It provides a kernel module that hooks onto netfilter and counts every packet passing a specified interface. If the quota for a ip/user is exceeded, the packet is dropped.

Kapacity is a tool for KDE for showing the ACPI battery state, AC state and CPU state in a window. It can also dock into the panel. It can handle CPU with CPU FREQ. It based on the ACPI Subsystem for Kernel 2.4 und 2.6

Pipe to colour lines produced by syslog-ng and similar programs written to terminal (TTY) or file. The program inserts ANSI escape sequences to colour log lines according to their severity. This means the colouring works when viewed on a terminal or using programs such as "less" or "more". You have to customize syslog-ng to include severity as the first character in each logged line, and to pipe the logged messages through the logcolourer program. You can use the program to colour...

This project involves adding code to the Linux kernel to implement crash dumps for performing post-failure analysis of a kernel crash.

We provide a mechanism to trace the NPTL Library as few intrusive as possible for the application dynamics. The post-mortem analysis then allows measurements (contension,...) and understanding of hangs or bugs. No change in kernel or user application.

IP accounting tools package based on Berkeley Packet Filer mechanism. Continue from BPFT by V.Vorobyev, TRAFD by V.Belekhov & S.Svirid. Use the PCAP library to implement connection to bpf kernel pseudo-device.

Syscall logger is a Linux kernel patch which enables logging of the selected syscalls using syslog.

USRBAC is a kernel patch and userspace daemon that allows role based access control to be mitegated in userspace. The goal is to allow a secure way to impliment RBAC compliant security systems using a daemon in userspace

Status Module is a daemon which forwards vital system information (memory usage, active processes, etc.) into the kernel logs by using a kernel module. This is very useful for logging or security purposes.

A linux kernel module and supporting user space environment which allow interception and modifying system calls that match user defined criteria. Think of it as strace on steroids.

KISS is a kernel-side host-oriented security tool, which may bring you file integrity checking, file and process hiding and actions handling on special internal events (using a tiny scripting language).

ProSum is a terminal based program that protects your files, sys_call_table and IDT like tripwire way (All in user space, without kernel modules) In addition, database with files etc. could be encrypted with Blowfish algorythm and more.

Project is a library of windows kernel mode drivers. These drivers intercept requests to file system drivers (FSD), filter and logging actions.