Click to See Complete Forum and Search --> : Scan Detection


optech
01-20-2001, 05:59 PM
In windows, i used a program called BlackICE to tell if someone was scanning me for open ports. I understand Port Sentry is good for this, however, I can't compile it properly. I'm looking for either the RPM format of Port Sentry or the RPM of another scan protection app... preferably BlackBox compatable

------------------
A zombified, somnambulist society. Leaving us as vitamins for the hibernating human animal. Do you see what I mean? On the surface you hate, but you know you need me.

Jeepsta
01-20-2001, 06:27 PM
Try a search on http://rpmfind.net and see if they have it. I believe they do.

Zach

------------------
Its a jeep thing... You wouldn't understand.

Craig McPherson
01-20-2001, 06:43 PM
You can get PortSentry in RPM -- I did it when I was forced to use RedHat for a month or two. I'm pretty sure I found it on rpmfind.net.

You might want to check out Snort also -- it's a bit similar to PortSentry, but it's a "smart" program, designed specifically to recognize portscans, DoS attacks, intentionally malformed packets, unlike Portsentry that just notes when someone tries to connect.

dhaze
01-20-2001, 09:40 PM
Also look for rpm "Firestarter"