Defcon 10 Presentation: README
8b30d4d06c0707c1b0df4c1d25de53c8611b56b948b5d6ca62d9b7ef101c8daf
CD stuff for Rubicon at Defcon X
---------------------------------
In this directory you will find:-
Rubicon Source
------------------
rubicon - Pre-alpha version of code. Not complete, more of interest than anything.
For more up-to-date code check: http://sourceforge.net/projects/rubicon/
rubicon-docs - The man and html documentation for this version
Library sources - latest as of 8 July 02
------------------
iptables - Contains libipq for the IPQ plugin. Needs linux 2.4+
libnet - Packet construction library (not to be confused with the other libnet!)
lipcap - Packet acquirement library
libxml - XML parser for policy reading and IDMEF output
roadrunner - BEEP library which will be used by IDXP
libidmef - Library for construction of IDMEF messages in XML
(libidxp) - This wasn't included as it wasn't used due to the library being buggy. If you want it - go to idxp.codefactory.se
Other
------------------
rubicon-finalreport.pdf - Final Report for degree project which created rubicon
draft-ietf-idwg-beep-idxp-05.txt - Draft RFC for the IDXP protocol
draft-ietf-idwg-idmef-xml-07.txt - Draft RFC for the IDMEF format
links.txt - Some useful links
rfc826.txt - ARP rfc
rfc791.txt - IP rfc
rfc792.txt - ICMP rfc
rfc768.txt - UDP rfc
rfc793.txt - TCP rfc