what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 11 of 11

Files from Nergal

Libnids Library 1.24

Posted Mar 20, 2010

Authored by Nergal | Site libnids.sourceforge.net

Libnids is a library that provides a functionality of one of NIDS (Network Intrusion Detection System) components, namely E-component. It means that libnids code watches all local network traffic, cooks received datagrams a bit, and provides convenient information on them to analyzing modules of NIDS. So, if you intend to develop a custom NIDS, you do not have to build low-level network code. If you decide to use libnids, and you have got E-component ready - you can focus on implementing other parts of NIDS.

Changes: This release fixes another remotely triggerable dereference in ip_fragment.c. An unofficial patch enables tracking of already established TCP connections. Missing reset of some tcp_* variables upon nids_exit has been fixed. This release has correct calculation of the radiotap header, compilation warning fixes with newer gcc, and uses pcap_get_selectable_fd() instead of pcap_fileno().

tags | local, library

SHA-256 | 314b4793e0902fbf1fdb7fb659af37a3c1306ed1aad5d1c84de6c931b351d359

Download | Favorite | View

libnids-1.21.tar.gz

Posted May 22, 2006

Authored by Nergal | Site libnids.sourceforge.net

Libnids is a library that provides a functionality of one of NIDS (Network Intrusion Detection System) components, namely E-component. It means that libnids code watches all local network traffic, cooks received datagrams a bit, and provides convenient information on them to analyzing modules of NIDS. So, if you intend to develop a custom NIDS, you do not have to build low-level network code. If you decide to use libnids, and you have got E-component ready - you can focus on implementing other parts of NIDS.

Changes: Various code updates.

tags | tool, local, intrusion detection

systems | unix

SHA-256 | 91ec08b9aeb2f869009b5b099f318c476f75942db64804eb50acde94696f4bf5

Download | Favorite | View

libnids-1.20.tar.gz

Posted Feb 18, 2005

Authored by Nergal | Site libnids.sourceforge.net

Libnids is a library that provides a functionality of one of NIDS (Network Intrusion Detection System) components, namely E-component. It means that libnids code watches all local network traffic, cooks received datagrams a bit, and provides convenient information on them to analyzing modules of NIDS. So, if you intend to develop a custom NIDS, you do not have to build low-level network code. If you decide to use libnids, and you have got E-component ready - you can focus on implementing other parts of NIDS.

Changes: Added wscale option parsing; surprisingly, it seems to be in some use, added nids_dispatch(), for systems which do not ignore pcap timeout, and the ability to specify hosts/networks for which we do not check checksums.

tags | tool, local, intrusion detection

systems | unix

SHA-256 | c5a7553f64bed2384ecc9535e67cf7d80ccf7f7f34ab8b132703b60d0eaec604

Download | Favorite | View

Libnids-W32-1.19.tar.gz

Posted Sep 21, 2004

Authored by Nergal | Site libnids.sourceforge.net

Libnids is a library that provides a functionality of one of NIDS (Network Intrusion Detection System) components, namely E-component. It means that libnids code watches all local network traffic, cooks received datagrams a bit, and provides convenient information on them to analyzing modules of NIDS. So, if you intend to develop a custom NIDS, you do not have to build low-level network code. If you decide to use libnids, and you have got E-component ready - you can focus on implementing other parts of NIDS.

Changes: Ported to Win32 by Goldie.

tags | tool, local, intrusion detection

systems | unix

SHA-256 | 137fe89a3f5ed030632fd95c5d8892b7a5ba53d1ef42b0f36ff2a12ca1435379

Download | Favorite | View

libnids-1.19.tar.gz

Posted Aug 9, 2004

Authored by Nergal | Site libnids.sourceforge.net

Libnids is a library that provides a functionality of one of NIDS (Network Intrusion Detection System) components, namely E-component. It means that libnids code watches all local network traffic, cooks received datagrams a bit, and provides convenient information on them to analyzing modules of NIDS. So, if you intend to develop a custom NIDS, you do not have to build low-level network code. If you decide to use libnids, and you have got E-component ready - you can focus on implementing other parts of NIDS.

Changes: Multiple bug fixes.

tags | tool, local, intrusion detection

systems | unix

SHA-256 | 788882607cb35eaf005525af3f7ee8e6c99f98d76ef9daf48fc6388af9f7ab31

Download | Favorite | View

libnids-1.18.tar.gz

Posted Oct 17, 2003

Authored by Nergal | Site libnids.sourceforge.net

Libnids is a library that provides a functionality of one of NIDS (Network Intrusion Detection System) components, namely E-component. It means that libnids code watches all local network traffic, cooks received datagrams a bit (quite a bit ;)), and provides convenient information on them to analyzing modules of NIDS. So, if you intend to develop a custom NIDS, you do not have to build low-level network code. If you decide to use libnids, and you have got E-component ready - you can focus on implementing other parts of NIDS.

Changes: Rejection of TCP packets with old timestamp, fixed memory corruption, and more.

tags | tool, local, intrusion detection

systems | unix

SHA-256 | b0275c914197a53c6ccf631eac756fd37ec6f2d8f09f15757061495cf9be0fcd

Download | Favorite | View

libnids-1.17rc1.tar.gz

Posted Sep 10, 2002

Authored by Nergal | Site packetfactory.net

Libnids is a library that provides a functionality of one of NIDS (Network Intrusion Detection System) components, namely E-component. It means that libnids code watches all local network traffic, cooks received datagrams a bit (quite a bit ;)), and provides convenient information on them to analyzing modules of NIDS. So, if you intend to develop a custom NIDS, you do not have to build low-level network code. If you decide to use libnids, and you have got E-component ready - you can focus on implementing other parts of NIDS.

Changes: Support for libnet-1.1, libpcap save files, 802.1Q VLAN, wireless frames, and more.

tags | tool, local, intrusion detection

systems | unix

SHA-256 | 5639fc9256c8b335e9756b11aac789529d11214de4c4db81fc0b54ec2f2579a6

Download | Favorite | View

libnids-1.16.tar.gz

Posted Nov 3, 2000

Authored by Nergal | Site packetfactory.net

Libnids is an implementation of an E-component of Network Intrusion Detection System. It emulates the IP stack of Linux 2.0.x. The libnids library offers IP defragmentation, TCP stream assembly and TCP port scan detection. Libnids is highly configurable, reliable, and portable.

tags | tool, tcp, intrusion detection

systems | linux, unix

SHA-256 | 49cea0381f1e7168cc2ae62a01e83dac820286af01068069986feb262d9e0eea

Download | Favorite | View

libnids-1.14.tar.gz

Posted Jul 12, 2000

Authored by Nergal | Site packetfactory.net

Libnids is a library that provides a functionality of one of NIDS (Network Intrusion Detection System) components, namely E-component. It means that libnids code watches all local network traffic, cooks received datagrams a bit (quite a bit ;)), and provides convinient information on them to analyzing modules of NIDS. So, if you intend to develop a custom NIDS, you don't have to build low-level network code. If you decide to use libnids, you have got E-component ready - you can focus on implementing other parts of NIDS.

Changes: Added support to capture packets on all interfaces, including loopback, added ability to refrain from setting promisc flag, added ability to disable tcp processing, libc5 support, alpha platform support, and bug fixes.

tags | tool, local, intrusion detection

systems | unix

SHA-256 | 8bce851ef10447e005e43e980935808d2de410a94b8e95667bb174cddd7b0c79

Download | Favorite | View

libnids-1.13.tar.gz

Posted Jan 28, 2000

Authored by Nergal | Site packetfactory.net

Libnids is a library that provides a functionality of one of NIDS (Network Intrusion Detection System) components, namely E-component. It means that libnids code watches all local network traffic, cooks received datagrams a bit (quite a bit ;)), and provides convinient information on them to analyzing modules of NIDS. So, if you intend to develop a custom NIDS, you don't have to build low-level network code. If you decide to use libnids, you have got E-component ready - you can focus on implementing other parts of NIDS.

Changes: GNU autoconf support, code cleanup and new libnids(3) manpage, pcap_filter field in nids_params, bugfix in ip_check_ext(), Solaris support.

tags | tool, local, intrusion detection

systems | unix

SHA-256 | 40a23d3e2bde94319ee12c160a56e1a67b8e69592cc10b92a4660d697a9a0749

Download | Favorite | View

libnids-1.12.tar.gz

Posted Oct 25, 1999

Authored by Nergal | Site packetfactory.net

Libnids is a library that provides a functionality of one of NIDS (Network Intrusion Detection System) components, namely E-component. It means that libnids code watches all local network traffic, cooks received datagrams a bit (quite a bit ;)), and provides convinient information on them to analyzing modules of NIDS. So, if you intend to develop a custom NIDS, you don't have to build low-level network code. If you decide to use libnids, you have got E-component ready - you can focus on implementing other parts of NIDS.

tags | tool, local, intrusion detection

systems | unix

SHA-256 | 37aab0e12817880ae502de7bec0810e0df2e1c6ee7cd328e933f0bca7751c656

Download | Favorite | View