Date: Mon, 10 May 2004 14:50:04 +0400 From: Roman Bogorodskiy <bogorodskiy@inbox.ru> To: FreeBSD-gnats-submit@FreeBSD.org Subject: ports/66449: New port: security/scanlogd - TCP port scan detection tool Message-ID: <E1BN8MF-000FEV-00.bogorodskiy-inbox-ru@mx1.mail.ru> Resent-Message-ID: <200405101100.i4AB0gGL053540@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 66449
>Category: ports
>Synopsis: New port: security/scanlogd - TCP port scan detection tool
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: change-request
>Submitter-Id: current-users
>Arrival-Date: Mon May 10 04:00:42 PDT 2004
>Closed-Date:
>Last-Modified:
>Originator: Roman Bogorodskiy
>Release: FreeBSD 5.2.1-RELEASE-p5 i386
>Organization:
>Environment:
System: FreeBSD lame.novel.ru 5.2.1-RELEASE-p5 FreeBSD 5.2.1-RELEASE-p5 #20: Sun Apr 18 05:58:53 MSD 2004 root@lame.novel.ru:/usr/obj/usr/src/sys/MIRRORBOX i386
>Description:
scanlogd is a TCP port scan detection tool, originally designed to illustrate
various attacks an IDS developer has to deal with. Unlike some of the other
port scan detection tools out there, scanlogd is designed to be totally safe
to use.
>How-To-Repeat:
>Fix:
begin 644 scanlogd.tar
M<V-A;FQO9V0N<V@`````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M`````````````#`Q,#`V-#0`,#`P,3<U,0`P,#`Q-S4Q`#`P,#`P,#`U-S$T
M`#$P,#0W-C4V,S<S`#`Q,C(V,0`@,```````````````````````````````
M````````````````````````````````````````````````````````````
M``````````````````````````````````````````!U<W1A<B`@`&YO=F5L
M````````````````````````````````````;F]V96P`````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M```````````````````````C(%1H:7,@:7,@82!S:&5L;"!A<F-H:79E+B`@
M4V%V92!I="!I;B!A(&9I;&4L(')E;6]V92!A;GET:&EN9R!B969O<F4*(R!T
M:&ES(&QI;F4L(&%N9"!T:&5N('5N<&%C:R!I="!B>2!E;G1E<FEN9R`B<V@@
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M;6MD:7(@+7`@<V-A;FQO9V0O(#X@+V1E=B]N=6QL(#(^)C$*96-H;R!X("T@
M<V-A;FQO9V0O9&ES=&EN9F\*<V5D("=S+UY8+R\G(#YS8V%N;&]G9"]D:7-T
M:6YF;R`\/"`G14Y$+6]F+7-C86YL;V=D+V1I<W1I;F9O)PI8340U("AS8V%N
M;&]G9"TR+C(N,2YT87(N9WHI(#T@861E,CDX.30P,F,S-&0Q,C)C,CDP.6(Q
M96$X,3EF86$*6%-)6D4@*'-C86YL;V=D+3(N,BXQ+G1A<BYG>BD@/2`X.3DX
M"D5.1"UO9BUS8V%N;&]G9"]D:7-T:6YF;PIE8VAO('@@+2!S8V%N;&]G9"]-
M86ME9FEL90IS960@)W,O7E@O+R<@/G-C86YL;V=D+TUA:V5F:6QE(#P\("=%
M3D0M;V8M<V-A;FQO9V0O36%K969I;&4G"E@C($YE=R!P;W)T<R!C;VQL96-T
M:6]N(&UA:V5F:6QE(&9O<CH@("`@<V-A;FQO9V0*6",@1&%T92!C<F5A=&5D
M.B`@("`@("`@("`@("`@("`@("`@("`@("`Q,"!-87D@,C`P-`I8(R!7:&]M
M.B`@("`@("`@("`@("`@("`@("`@("`@("`@("`@("`@(%)O;6%N($)O9V]R
M;V1S:VEY"E@C"E@C("1&<F5E0E-$)`I8(PI8"EA03U)43D%-13T)<V-A;FQO
M9V0*6%!/4E1615)324]./0DR+C(N,0I80T%414=/4DE%4ST)<V5C=7)I='D*
M6$U!4U1%4E]3251%4ST):'1T<#HO+V]P96YW86QL+F-O;2]S8V%N;&]G9"\@
M7`I8"0EF='`Z+R]F='`N;W!E;G=A;&PN8V]M+W!U8B]P<F]J96-T<R]S8V%N
M;&]G9"\@7`I8"0EF='`Z+R]R="YF;2]P=6(O<V-A;FQO9V0O"E@*6$U!24Y4
M04E.15(]"6)O9V]R;V1S:VEY0&EN8F]X+G)U"EA#3TU-14Y4/0E40U`@<&]R
M="!S8V%N(&1E=&5C=&EO;B!T;V]L"E@*6$Q)0E]$15!%3D13/2`@("!P8V%P
M+C(Z)'M03U)44T1)4GTO;F5T+VQI8G!C87`*6"YI9B!D969I;F5D*%=)5$A?
M3$E"3DE$4RD*6$)524Q$7T1%4$5.1%,]("1[3$]#04Q"05-%?2]L:6(O;&EB
M;FED<RYA.B1[4$]25%-$25)]+VYE="]L:6)N:61S"E@N96YD:68*6`I8+FEF
M(&1E9FEN960H5TE42%],24).2413*0I804Q,7U1!4D=%5#T);&EB;FED<PI8
M+F5L<V4*6$%,3%]405)'150]"6QI8G!C87`*6"YE;F1I9@I8"EA-04XX/0D)
M<V-A;FQO9V0N.`I8"EA03$E35%]&24Q%4ST)8FEN+W-C86YL;V=D"E@*6&1O
M+6EN<W1A;&PZ"E@))'M)3E-404Q,7U!23T=204U]("1[5U)+4U)#?2]S8V%N
M;&]G9"`D>U!2149)6'TO8FEN"E@))'M)3E-404Q,7TU!3GT@)'M74DM34D-]
M+W-C86YL;V=D+C@@)'M-04Y04D5&25A]+VUA;B]M86XX"E@*6'!O<W0M:6YS
M=&%L;#H*6`D@0"1[0T%4?2`D>U!+1TU%4U-!1T5]"E@*6"YI;F-L=61E(#QB
M<V0N<&]R="YM:SX*14Y$+6]F+7-C86YL;V=D+TUA:V5F:6QE"F5C:&\@8R`M
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M.C0Y(#(P,#0*6"LK*R!S8V%N;&]G9"YC"4UO;B!-87D@,3`@,3,Z,S,Z,3`@
M,C`P-`I80$`@+3$Q+#8@*S$Q+#<@0$`*6"`*6"`C9&5F:6YE(%]"4T1?4T]5
M4D-%"E@@(VEN8VQU9&4@/'-T9&EO+F@^"E@K(VEN8VQU9&4@/'-T9&QI8BYH
M/@I8("-I;F-L=61E(#QU;FES=&0N:#X*6"`C:6YC;'5D92`\<VEG;F%L+F@^
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M=7-T<F%T92`*6'9A<FEO=7,@871T86-K<R!A;B!)1%,@9&5V96QO<&5R(&AA
M<R!T;R!D96%L('=I=&@N(%5N;&EK92!S;VUE(&]F('1H92!O=&AE<B`*6'!O
M<G0@<V-A;B!D971E8W1I;VX@=&]O;',@;W5T('1H97)E+"!S8V%N;&]G9"!I
M<R!D97-I9VYE9"!T;R!B92!T;W1A;&QY('-A9F4@"EAT;R!U<V4N"E@*6%=7
M5SH@:'1T<#HO+V]P96YW86QL+F-O;2]S8V%N;&]G9"\*6`I8+5)O;6%N($)O
M9V]R;V1S:VEY"E@\8F]G;W)O9'-K:7E`:6YB;W@N<G4^"D5.1"UO9BUS8V%N
M;&]G9"]P:V<M9&5S8W(*96-H;R!X("T@<V-A;FQO9V0O<&MG+6UE<W-A9V4*
M<V5D("=S+UY8+R\G(#YS8V%N;&]G9"]P:V<M;65S<V%G92`\/"`G14Y$+6]F
M+7-C86YL;V=D+W!K9RUM97-S86=E)PI8<V-A;FQO9V0@<F5Q=6ER97,@82!S
M97!A<F%T92!U<V5R(&%N9"!G<F]U<"!N86UE9"`G<V-A;FQO9V0G('1O"EAR
M=6XN(%EO=2!W:6QL(&YE960@=&\@8W)E871E('1H97-E(&UA;G5A;&QY+B!&
M;W(@97AA;7!L93H*6`I8<'<@9W)O=7!A9&0@<V-A;FQO9V0*6'!W('5S97)A
M9&0@<V-A;FQO9V0@+60@+VYO;F5X:7-T96YT("UG('-C86YL;V=D("US("]S
M8FEN+VYO;&]G:6X@7`I8"2UC(%-#04Y,3T=$"E@*6`D*14Y$+6]F+7-C86YL
M;V=D+W!K9RUM97-S86=E"F5X:70*"@``````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
9````````````````````````````````````
`
end
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E1BN8MF-000FEV-00.bogorodskiy-inbox-ru>