.:[ packet storm ]:.
                               
plan for the worst
plan for the worst

 Section:  .. / sniffers / snort  /

Snort is an excellent intrusion detection system and packet sniffer for many unix platforms. Homepage is http://www.clark.net/~roesch/security.html

Page 2 of 10
<< 1 2 3 4 5 6 7 8 9 10 >> Files 25 - 50 of 235
Currently sorted by: Last ModifiedSort By: File Name, File Size

 ///  File Name: snort-2.6.0.1.tar.gz
Description:
Snort is an open source network intrusion detection system, capable of performing real-time traffic analysis and packet logging on IP networks. It can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much more. Includes real time alerting, incorporating alerting mechanisms for syslog, a user specified file, a UNIX socket, or WinPopup messages via smbclient.
Author:Martin Roesch
Homepage:http://www.snort.org
Changes:Added new changes to allow configurable dropping of decoder alerts in inline mode. Added updates to the Oracle database plugin to handle large data blobs and graceful disconnection.
File Size:3582092
Last Modified:Aug 27 20:06:25 2006
MD5 Checksum:6b5c011fc6ef00262f3f066086bc5577

 ///  File Name: snortsms-1.4.5.tar.gz
Description:
SnortSMS is a highly configurable sensor management system that provides the ability to remotely administer Snort [and Barnyard] based Intrusion Detection Systems (IDS), push configuration files, add/edit rules, and monitor system health and statistics, all from a simple and clean Web interface console. Whether you have one or multiple Snort sensors, it can help unify and synchronize all sensor configurations.
Author:SmithJ108
Homepage:http://snortsms.servangle.net/
File Size:233489
Last Modified:Aug 27 18:12:15 2006
MD5 Checksum:7dd19535fc362a50dac52bfed279c96d

 ///  File Name: aanval-2.2-stable.tar.gz
Description:
Aanval is a data management, correlation and analysis console designed specifically for Snort and Syslog data. Featuring custom reports, real time displays, browser-based, multi-user, multi-sensor, advanced analysis charting and graphing, host matching, custom displays, complete remote sensor management, automatic signature updating, signature editing and more.
Homepage:http://www.aanval.com
Changes:A wide range of bug fixes, extensive performance enhancements, all new look / feel, new template system, more powerful indexer, upgraded sensor management tools and more.
File Size:6214470
Last Modified:Jul 26 04:34:28 2006
MD5 Checksum:72101988df19cf78a3e77c78b570912c

 ///  File Name: snortsms-1.3.3.tar.gz
Description:
SnortSMS is a highly configurable sensor management system that provides the ability to remotely administer Snort [and Barnyard] based Intrusion Detection Systems (IDS), push configuration files, add/edit rules, and monitor system health and statistics, all from a simple and clean Web interface console. Whether you have one or multiple Snort sensors, it can help unify and synchronize all sensor configurations.
Author:SmithJ108
Homepage:http://snortsms.servangle.net/
Changes:Several database changes have occurred.
File Size:229896
Last Modified:Jul 24 01:35:40 2006
MD5 Checksum:9f83442b8cf7d628f258e751d3f57a77

 ///  File Name: snortsms-1.3.2.tar.gz
Description:
SnortSMS is a highly configurable sensor management system that provides the ability to remotely administer Snort [and Barnyard] based Intrusion Detection Systems (IDS), push configuration files, add/edit rules, and monitor system health and statistics, all from a simple and clean Web interface console. Whether you have one or multiple Snort sensors, it can help unify and synchronize all sensor configurations.
Author:SmithJ108
Homepage:http://snortsms.servangle.net/
Changes:Major rewrite of several areas. Several database changes have occurred. Various other fixes and enhancements.
File Size:238300
Last Modified:Jul 14 03:31:12 2006
MD5 Checksum:3ba07feefb1ff97cb59cf8dc1dab623f

 ///  File Name: FLoP-1.6.0.tar.gz
Description:
FLoP is utility designed to gather alerts with a payload from distributed Snort sensors at a central server, and to store them in a database. Both PostgreSQL and MySQL are currently supported. High priority alerts may be sent out via e-mail.
Author:DG
Homepage:http://www.geschke-online.de/FLoP
Changes:Documentation was updated and extended. Various bug fixes.
File Size:766604
Last Modified:Jun 12 03:25:07 2006
MD5 Checksum:fbe918235e97994a50f3b54855f3c876

 ///  File Name: snort-2.6.0.tar.gz
Description:
Snort is an open source network intrusion detection system, capable of performing real-time traffic analysis and packet logging on IP networks. It can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much more. Includes real time alerting, incorporating alerting mechanisms for syslog, a user specified file, a UNIX socket, or WinPopup messages via smbclient.
Author:Martin Roesch
Homepage:http://www.snort.org
Changes:Fixed the HTTP evasion flaw. Moved to new versioning system.
File Size:3322826
Last Modified:Jun 11 20:10:48 2006
MD5 Checksum:88bb7f628e5bf1edc6409fbb126eaed0

 ///  File Name: snort-2.4.5.tar.gz
Description:
Snort is an open source network intrusion detection system, capable of performing real-time traffic analysis and packet logging on IP networks. It can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much more. Includes real time alerting, incorporating alerting mechanisms for syslog, a user specified file, a UNIX socket, or WinPopup messages via smbclient.
Author:Martin Roesch
Homepage:http://www.snort.org
Changes:Fixed the HTTP evasion flaw.
File Size:2817837
Last Modified:Jun 11 20:09:44 2006
MD5 Checksum:108b3c20dcbaf3cdb17ea9203342eaaa

 ///  File Name: sigof-0.9-rc1.tar.bz2
Description:
SIGOF (Security Information Graphics Oriented Forensic) has been developed as a complement to the ACID or BASE project by implementing useful and detailed graphical presentation of security information/events. This program can exploit any security information stored in an ACID/BASE database schema. SIGOF introduces another way to manage security forensics and analysis by providing graphical representation of statistical and security trends. This approach provides the ability to manage a large amount of security events.
Author:krisstoffe
Homepage:http://sigof.sourceforge.net/
File Size:21621
Last Modified:Apr 29 06:49:24 2006
MD5 Checksum:10dcd8e1901d4a034db1b6e840a6a852

 ///  File Name: aanval-2.0-stable.tar.gz
Description:
Aanval is a data management, correlation and analysis console designed specifically for Snort and Syslog data. Featuring custom reports, real time displays, browser-based, multi-user, multi-sensor, advanced analysis charting and graphing, host matching, custom displays, complete remote sensor management, automatic signature updating, signature editing and more.
Homepage:http://www.aanval.com
Changes:Brand new series 2 is a complete over-haul of the 1.x series and includes many bug fixes, performance enhancements, major look and feel changes and reporting updates.
File Size:6297923
Last Modified:Mar 20 16:48:16 2006
MD5 Checksum:f153d912d45395de4195eb85ec2533eb

 ///  File Name: current-attack.sh.txt
Description:
Snortattack is a bash shell script that is designed to make the installation of snort in inline mode on Fedora or Debian as easy as possible.
Author:snortattack
Homepage:http://www.snortattack.org/
File Size:3897
Last Modified:Mar 15 15:03:35 2006
MD5 Checksum:6b6a49505070bcc0fa3137a86710ae0b

 ///  File Name: snort-2.4.4.tar.gz
Description:
Snort is an open source network intrusion detection system, capable of performing real-time traffic analysis and packet logging on IP networks. It can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much more. Includes real time alerting, incorporating alerting mechanisms for syslog, a user specified file, a UNIX socket, or WinPopup messages via smbclient.
Author:Martin Roesch
Homepage:http://www.snort.org
Changes:The Snort 2.4.4 release fixes an issue where under certain conditions the frag3 preprocessor will not properly refragment stream data. Improvements have also been made to stream4 and a fix for Snort in inline mode was added. Numerous other improvements are detailed in the changelog for this release.
File Size:2825187
Last Modified:Mar 8 23:52:58 2006
MD5 Checksum:9dc9060d1f2e248663eceffadfc45e7e

 ///  File Name: oinkmaster-2.0.tar.gz
Description:
Oinkmaster is simple Perl script released under the BSD license to help update and manage Snort 2.0+ rules and to comment out the unwanted ones after each update. It will report what has changed since the last update, offering good change control.
Author:Andreas Oestling
Homepage:http://oinkmaster.sourceforge.net/
Changes:Major version bump to celebrate that Oinkmaster has now turned 5 years old! Check the changelog for more.
File Size:80111
Last Modified:Mar 8 23:01:13 2006
MD5 Checksum:d2a1b56f51cf40e919c63206ca4ec8f8

 ///  File Name: FLoP-1.5.1.tar.gz
Description:
FLoP is utility designed to gather alerts with a payload from distributed Snort sensors at a central server, and to store them in a database. Both PostgreSQL and MySQL are currently supported. High priority alerts may be sent out via e-mail.
Author:DG
Homepage:http://www.geschke-online.de/FLoP
Changes:Feature enhancements and bug fixes.
File Size:722347
Last Modified:Feb 14 00:29:02 2006
MD5 Checksum:284cd0579b1afda45db4ac93f2dc41d8

 ///  File Name: aanval-1.61-stable.tar.gz
Description:
The Aanval Intrusion Detection Console is the industries most advanced and feature rich snort and syslog data management and correlation system. Aanval supports multiple sensors, snort devices, syslog devices, linux/unix and Mac OS X compatible, live updating monitors, data archiving, email reporting and much, much more.
Homepage:http://www.aanval.com
Changes:Addition of the new Aanval correlation engine, email report scheduling and many performance enhancements.
File Size:7443866
Last Modified:Feb 9 21:16:23 2006
MD5 Checksum:15c098738e1c2b755b23f635c0ebfb29

 ///  File Name: FLoP-1.5.0.tar.gz
Description:
FLoP is utility designed to gather alerts with a payload from distributed Snort sensors at a central server, and to store them in a database. Both PostgreSQL and MySQL are currently supported. High priority alerts may be sent out via e-mail.
Author:DG
Homepage:http://www.geschke-online.de/FLoP
Changes:Feature enhancements and bug fixes.
File Size:697591
Last Modified:Jan 21 15:24:53 2006
MD5 Checksum:d2a2fc3191e078c234d8b23f52a56227

 ///  File Name: placid-2.1.tar.gz
Description:
Placid is a Web-based frontend for Snort that uses MySQL. It supports searching, sorting, and graphing of events, and was designed for speed and to have little overhead.
Author:Phillip Deneault
Homepage:http://speakeasy.wpi.edu/placid/
Changes:Bug fixes, Fixed start/end time problems when searching, Added http refresh to UI, Added returned row count to search summary screen, and more.
File Size:29412
Last Modified:Jan 15 12:35:06 2006
MD5 Checksum:b1a34da0a60a88624812efff71cddb7e

 ///  File Name: snortsms-1.2.2.tar.gz
Description:
SnortSMS is a highly configurable sensor management system that provides the ability to remotely administer Snort [and Barnyard] based Intrusion Detection Systems (IDS), push configuration files, add/edit rules, and monitor system health and statistics, all from a simple and clean Web interface console. Whether you have one or multiple Snort sensors, it can help unify and synchronize all sensor configurations.
Author:SmithJ108
Homepage:http://snortsms.servangle.net/
Changes:Various fixes and enhancements.
File Size:304885
Last Modified:Jan 8 13:42:01 2006
MD5 Checksum:40c577ee51dd2aa83c75b0a6e4960fb9

 ///  File Name: aanval-1.60-stable.tar.gz
Description:
Aanval is a web based Snort intrusion detection console. Currently supporting Snort and syslog, Aanval provides dynamic monitoring, comprehensive reporting and powerful alerting capabilities. Several primary features are account hierarchy, data-archiving, real-time data displays, auto signature updating, sensor management tools, easy upgrading, advanced searching, artificial intelligence, timezone control, charts/graphs, query saving and more.
Homepage:http://www.aanval.com
Changes:New 1.60 features include database optimizations, many bug fixes, new user look and feel, java-based SSHTerm, and more.
File Size:7422409
Last Modified:Dec 18 04:36:19 2005
MD5 Checksum:d7cd76e828a1da4bc0c84774a110bcac

 ///  File Name: incident-2.9.tar.gz
Description:
Incident.pl is a small script which, when given syslogs generated by snort or other tools, can generate an incident report for events that appear to be attempted security attacks, gather information on the remote host, and report the attack to the appropriate administrators.
Author:Viraj Alankar
Homepage:http://www.bigfoot.com/~valankar/
Changes:RIPE redirect stopped working due to arin result changing. Fixed.
File Size:65331
Last Modified:Nov 20 15:06:55 2005
MD5 Checksum:a294cb57de5f5dc3e63f3e100a8808aa

 ///  File Name: mudpit-1.5.tar.gz
Description:
Mudpit is an intelligent, modular, and reliable spool processor for Snort's unified format.
Author:farm9opensource
Changes:Added per spool configuration variables for SID/Gen map, reference, and class files. Improved logging system, log at appropriate priorities. Improved autoconf mysql detection code and support for custom plugins supplied at configure time.
File Size:396227
Last Modified:Oct 26 11:49:29 2005
MD5 Checksum:e2294b01bc9a225720124842386b61e2

 ///  File Name: snort-2.4.3.tar.gz
Description:
Snort is an open source network intrusion detection system, capable of performing real-time traffic analysis and packet logging on IP networks. It can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much more. Includes real time alerting, incorporating alerting mechanisms for syslog, a user specified file, a UNIX socket, or WinPopup messages via smbclient.
Author:Martin Roesch
Homepage:http://www.snort.org
Changes:Fixed a remotely exploitable buffer overflow vulnerability in the Back Orifice preprocessor.
File Size:2733590
Last Modified:Oct 18 20:12:13 2005
MD5 Checksum:5c3c8c69f2459bbe0c1f2057966c88a7

 ///  File Name: base-1.2.tar.gz
Description:
BASE is the Basic Analysis and Security Engine. It is based on the code from the Analysis Console for Intrusion Databases (ACID) project. This application provides a Web frontend to query and analyze the alerts coming from a Snort IDS.
Author:Kevin Johnson
Homepage:http://sourceforge.net/projects/secureideas/
Changes:Multiple bug fixes. Added ISC Source/Subnet report. Added TrustedSource IP lookup. Various other additions and tweaks.
File Size:340007
Last Modified:Oct 11 01:43:37 2005
MD5 Checksum:66acf9b2f565cbebb1d33e49d360ed3c

 ///  File Name: snort-2.4.2.tar.gz
Description:
Snort is an open source network intrusion detection system, capable of performing real-time traffic analysis and packet logging on IP networks. It can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much more. Includes real time alerting, incorporating alerting mechanisms for syslog, a user specified file, a UNIX socket, or WinPopup messages via smbclient.
Author:Martin Roesch
Homepage:http://www.snort.org
Changes:Fixed a crash bug with -T and default logging setup. Corrected Win32 directory setup for new WinPCAP.
File Size:2785710
Last Modified:Oct 3 14:46:14 2005
MD5 Checksum:6e9838b6a7bbe8bd346ae5bdc1d561f4

 ///  File Name: snort-2.4.1.tar.gz
Description:
Snort is an open source network intrusion detection system, capable of performing real-time traffic analysis and packet logging on IP networks. It can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much more. Includes real time alerting, incorporating alerting mechanisms for syslog, a user specified file, a UNIX socket, or WinPopup messages via smbclient.
Author:Martin Roesch
Homepage:http://www.snort.org
Changes:Snort 2.4.1 has been released and addresses a bug in TCP SACK processing that could result in a DoS for some text based logging methods. In addition, this release includes changes and fixes for several issues reported by the community.
File Size:2695304
Last Modified:Sep 20 04:14:34 2005
MD5 Checksum:7b7d36e063a674fd9cc324969012f32a