Ethereal is a GTK+-based network protocol analyzer, or sniffer, that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and to give Ethereal features that are missing from closed-source sniffers. Screenshot available here. Lots of bugs were fixed, and new dissectors added.
b6e7ef623567c1c8ccf3f2898f2727b7b5862eaf9c000f6299bc4baba19a0fb6
StMichael is a LKM that attempts to detect and divert attempts to install a kernel-module backdoor into a running linux system. This is done by monitoring the init_module and delete_module process for changes in the system call table. Detects most modern LKM's, including KIS.
3cadd9c000f7abda3f802cd86a8bb3e997005480eea923b062032b96f0c4b9e4