new monitor: worm/network scan detector for ipchains gateway
Brought to you by:
trockij
General purpose monitor, periodically runs "ipchains -M
-L -n" to find out which machines are masquerading
through the gateway. Sources that seem to be hitting a
lot of different destinations all at once are flagged.
Monitor successfully notified us of a W32.Nachia
infection this morning.
Release under GPL from Granta Design approved by Paddy
Clark.
Logged In: YES
user_id=144698
(odd, the patch file upload didn't work... try again)
anti-netscan monitor