Software Map

With Snort2Pf, you can turn your local Snort
installation easily into an "intrusion detection
and prevention system", rather than simply using
it for post-mortem analysis. Such a system also
blocks the recognized violations.

IPCAD (IP Cisco Accounting Daemon) is an IP
accounting daemon that runs in the background and
listens to traffic on specified interfaces and
exports the collected information using rsh or
NetFlow. It uses raw BPF devices, PCAP library,
divert, tee, or Linux iptables' ULOG & libipq
packet sources.

This patch integrates SecurID authentication services directly into the OpenSSH daemon, allowing users to use SecurID tokens directly as their passwords instead of relying on the clunky sdshell. It rides on the plain password auth architecture in OpenSSH to avoid requiring ChallengeResponse or securid-1@ssh.com style auth. It supports full privilege separation.

HATop is an interactive ncurses client and real-time monitoring and statistics displaying tool for the HAProxy TCP/HTTP load balancer. HATop's appearance is similar to top(1). It supports various modes for detailed statistics of all configured proxies and services in near real-time. In addition, it features an interactive CLI for the HAProxy Unix socket. This allows administrators to control the given HAProxy instance (change server weight, put servers into maintenance mode, etc.) directly out of HATop (using keybinds or the CLI) and monitor the results immediately.

downtimed is a program that monitors operating system downtime, uptime, shutdowns, and crashes and records such events. At OS startup it logs information about previous downtime. It then periodically updates a time stamp file on the disk, which is used to determine the approximate time when the system was last up and running. During a graceful system shutdown, it records a time stamp in another file. The downtimes(1) command line tool can be used to inspect records of past downtime.

agentsmith is a daemon that continuously monitors a log file for break-in attempts by remote hosts. Upon detection of a break-in attempt, it launches a user defined script or application, which can do virtually anything from sending mail messages to whatever else you might think of. The criteria for what is considered a break-in attempt can be configured by means of a regular expression.

vpnd is a daemon which connects two networks on network level either via TCP/IP or a (virtual) leased line attached to a serial interface. All data transfered between the two networks are encrypted using the unpatented free Blowfish encryption algorithm with a key length of up to 576 bits (may be downgraded to a minimum of 0 bits to suit any legal restrictions).

GeoIP Weather is a PHP script that uses GeoIP City to geocode a user's location and makes requests to the weather.com XML API to return local weather data to the user.

UpdateDD is a command line tool that updates a
dynamic DNS record. It supports the following
features: Web-based IP-detection, IP address
caching, configuration files with C-like syntax,
simple interface for managing multiple accounts
and hostnames, and status output to syslog.
Supported services include: changeip.com,
dyndns.org, eurodyndns.org, ovh.net, no-ip.org,
ods.org, hn.org, regfish.com, and tzo.com.

fdm (fetch and deliver mail) is a simple, lightweight replacement for mail fetching, filtering, and delivery programs such as fetchmail and procmail. It can fetch using POP3, POP3S, IMAP, IMAPS, or stdin, and deliver to a pipe, file, maildir, mbox, or SMTP server, based on a set of regexps. It can be used for both single user and multiuser setups, and is designed with privilege separation when running as root.

arpalert uses ARP address monitoring to help
prevent unauthorized connections on the local
network. If an illegal connection is detected, a
program or script is launched, which could be used
to send an alert message, for example.

mod_backhand is a load balancing module for Apache. It provides per-request HTTP redirection within a heterogeneous Apache server cluster. Each request is processed and run through a set of "candidacy functions" to determine which server is best suited to respond. The request is then proxied to that server. Facilities are in place to allow you to write your own dynamically loadable decision making algorithms. Everything about the request and the current availability of resources can be used in the decision-making process.

dhcpy6d delivers IPv6 addresses for DHCPv6 clients, which can be identified by DUID, hostname, or MAC address, as in the good old IPv4 days. Addresses may be generated randomly, by range, or by arbitrary ID or MAC address. Clients can get more than one address, leases and client configuration can be stored in databases, and DNS can be updated dynamically.