The net/courtney port

courtney-1.3p0 – simple port scan detector

Description

Monitors the network and identifies the source machines of SATAN
probes/attacks. Courtney receives input from tcpdump counting the
number of new services a machine originates within a certain time
window. If one machine connects to numerous services within that
time window, courtney identifies that machine as a potential SATAN
host.

No homepage
Categories:
net security

Library dependencies

Build dependencies

Run dependencies