Result for 02A293B93629DB38403B1AAB5CA13ED619FD8702

Query result

Key	Value
MD5	45A4B8325F05AE181F666CA24505AAAB
PackageArch	s390
PackageDescription	Port Scan Attack Detector (psad) is a collection of three lightweight system daemons written in Perl and in C that are designed to work with Linux iptables firewalling code to detect port scans and other suspect traffic. It features a set of highly configurable danger thresholds (with sensible defaults provided), verbose alert messages that include the source, destination, scanned port range, begin and end times, tcp flags and corresponding nmap options, reverse DNS info, email and syslog alerting, automatic blocking of offending ip addresses via dynamic configuration of iptables rulesets, and passive operating system fingerprinting. In addition, psad incorporates many of the tcp, udp, and icmp signatures included in the snort intrusion detection system (http://www.snort.org) to detect highly suspect scans for various backdoor programs (e.g. EvilFTP, GirlFriend, SubSeven), DDoS tools (mstream, shaft), and advanced port scans (syn, fin, xmas) which are easily leveraged against a machine via nmap. psad can also alert on snort signatures that are logged via fwsnort (http://www.cipherdyne.org/fwsnort/), which makes use of the iptables string match module to detect application layer signatures.
PackageMaintainer	Fedora Project
PackageName	psad
PackageRelease	6.fc23
PackageVersion	2.2.1
SHA-1	02A293B93629DB38403B1AAB5CA13ED619FD8702
SHA-256	7034157F3D1C0231E7013D56E19D7C256BD775E07B43E266B4E2A021A6009F1E
hashlookup:children-total	81
hashlookup:trust	50

Network graph view

Children (Total: 81)

The searched file hash includes 81 children files known and seen by metalookup. A sample is included below:

Key	Value
CRC32	08289A7B
FileName	./usr/share/doc/psad/BENCHMARK
FileSize	3563
MD5	AE6C8419113F6B32A13048505A37F7F0
OpSystemCode	362
ProductCode	10075
RDS:package_id	10075
SHA-1	063DA4A16B4EB1AE35B10B1EF335E688B98DD522
SHA-256	E5CF54FFE87CD7E3F4F68C29314B75F5545C2CC93098F809F9160CEBE52DB2AA
SSDEEP	96:KX+SisMnDdD0RsYwZQY3ZV3jsH1a/T9+Ul5g9:KOSGLMo/TgUA9
SpecialCode
TLSH	T1DF718301BDBC3BA6318366323B3C7270C788A77D93242252D58DB1352349D6913F6B82
db	nsrl_legacy
insert-timestamp	1648735417.0709713
source	RDS_2022.03.1_legacy.db

Key	Value
FileName	./usr/share/man/man1/nf2csv.1.gz
FileSize	2044
MD5	66DC228967993E7290FBFE055F87C611
SHA-1	08BC2CDCA83C5663A50E893737870C355A3298A0
SHA-256	DFFD590472A4C3AC7915BD62C17EE549632D15D0CE8414A23D131977B5AC0BCB
SSDEEP	48:XBcAQnJvfOJcI2PqVjWKw78l58jI/gfbJlVLkfV4Dckwg:XQnkJcI2MS97052IyrKVmF
TLSH	T184412A3794A8433CDD11F91264E8D2EDFB191BB11679CB803BA24C92EE25DCE42D3785

Key	Value
FileName	./etc/fwsnort/snort_rules/rservices.rules
FileSize	2867
MD5	EDF7BB2413DC94FAC0AF5323E031F996
SHA-1	0A18F4463E99A2593384468A9F0D7975278D0E18
SHA-256	71CA68EACEF3BC9417275FE1ECC964B723D7312F04CFBBA2CA7CD2AED9EAA6CE
SSDEEP	48:gQBKiO9eDONqK6GOk8O8Ye+OpoHvcagOQ3tqMYqKJK9pzc3X3oB4IFCNKj/FCNXk:X6eD9GWYe+RHvcag9wNapcn6RwY7wJk
TLSH	T18C519F1C7EBE09B91BA9E3701C173613F1A9D912AC221F1817992254CD8CDF1D3FA396

Key	Value
FileName	./etc/logrotate.d/psad
FileSize	515
MD5	13E009156C9381BA19E6BBD62374C712
SHA-1	0AD0FB84D9D0DB6EF36F93968B34CFFB5CE45EAB
SHA-256	48125C7DA4C99E3D5FFCFA42922C4478A8B8997C1AB7232FE523CCDFB532476B
SSDEEP	6:YOeDIqpxcF39pCFWLB2JMi9eF1QZ6hQcdG0/R2FFWFdLwl:YjBxZFqBsENhPXo/mLwl
TLSH	T1C4F0AB0C155CBD322883D2C6522E4AC9A13814006B6908423B9EB6E96F2FE7057E4E68

Key	Value
FileName	./usr/share/doc/psad/SCAN_LOG
FileSize	1827
MD5	BC6E539FCA350458B7473032126DA6EE
SHA-1	0D15E5442C124C1D7BC1CDDD9433E9C0C2801D1B
SHA-256	992014A60F4C226D7804B85F192722769F162C7A80B23A6F1872EACA734ED9C5
SSDEEP	48:2l31P6SM8jprApG3YZMtO8FufV7lAJATWyVejpM8R:+1gWApgbuNE+U
TLSH	T153314F0BBF0171A9E316C6B105B26152D73963A352570828F5DD83F08F93D72B362BA9

Key	Value
CRC32	984B9036
FileName	etc/psad/protocols
FileSize	2933
MD5	2E1E463038CC62E7110E33E21552751F
OpSystemCode	362
ProductCode	17075
RDS:package_id	17075
SHA-1	0E79926BC6DD519321D563978AA865AEE7467024
SHA-256	234998A1403E45E1B3F263EFB79F7C21E32032B1F7DC65054746DC28F69D2A28
SSDEEP	48:ZzxmX2i8fBK/B1TMSKWhRQs0KxHJFvD74FAMrxAWaW/TTVlsz7Acg6ozHBzc0RW5:7Q2TBCB1ZDd0KjAxAWv//VlWAcab1c8Y
SpecialCode
TLSH	T1475163AED74B17AC01A1D6FAE17D7514DA1F9614D1C0B10C74B0F9DB22830A8C72A1E9
db	nsrl_legacy
insert-timestamp	1648670115.9078636
source	RDS_2022.03.1_legacy.db
tar:gname	root
tar:uname	root

Key	Value
FileName	./usr/sbin/kmsgsd
FileSize	19032
MD5	F25A530A8075C76EC9355EC01ECDE33B
SHA-1	1513347B7A6BE60C92F490633E93EF87F632D85C
SHA-256	AFE2E3F9BC282C505C6496AFC19279CEE5451E825CCE02C6FE7BBC47B764B476
SSDEEP	192:J5FmoW2l7uVXtdOpvrD5N8DnqaEjGiDaTNUWMqiD0kmRmWT8jOnrcDSOa:bP8VdcpDD5eDqxqMuQ018qrcPa
TLSH	T1A282D85967329BF6CCEA133B9B6E429B0B33C0F6DB07015E7B4C915A2F179189D41B22

Key	Value
FileName	./etc/fwsnort/snort_rules/x11.rules
FileSize	526
MD5	C5C346D3A031F0BE3E30668799DD9D84
SHA-1	18333FE1A717EE49450A7EFE28A5A606F0F442B4
SHA-256	93E2184DAA83E0F6FB7DBA2E82D4931648733D73A98CBC7592ED470DF1E5A5C1
SSDEEP	12:VeQGDyf7GT4jnTPOUxh4sZp4kfmIvweiVBn:gQFfST4zbn74vIweGB
TLSH	T15FF0C01D2CA56C785370D23D40897553F10CF40338D608D0C79D2344C6C4DA966AD05B

Key	Value
FileName	./etc/fwsnort/snort_rules/tftp.rules
FileSize	2512
MD5	21DC12292E0BD4165DE9BE5BF5E9A0D8
SHA-1	1BFFAEC21C9FD145577F48F7794C6A129F02A5A8
SHA-256	4BA1CEAB39B6CC8D0659E1321EC77E71C3A44B46DAB6E3197645BEAEA8961A3B
SSDEEP	48:gQBPZ28R49j8YCRvxDLkMS8pbMeDpkQle38newAe8me7RO:BSW1FQMS8pbMeDpJleMnewAe8me7Q
TLSH	T16E51D03C1FEA4D9117F1F69868837B9F2112E076B8A045403394353DDAC8D6665BB2AF

Key	Value
FileName	./etc/fwsnort/snort_rules/web-frontpage.rules
FileSize	9423
MD5	DDF939AD4659A2BCB830DA3C5A376F6F
SHA-1	1E416367998CA4016B29DB5ED9810A231AC0C1AD
SHA-256	27D4F4AFFACEC7BAC6CBF57C7B5DC88DD41536FCE0C5E0E585410ACF7EDB3778
SSDEEP	48:gQBXHnwjYEWoD+fl7dmjlNZ++PPFT68/jVcV8T52WPRlbyjmfrkYsS5BAlBkfIOD:1wbDiHDUbmqLA/kgSaJm6rRFj7truN
TLSH	T10312F0AE1E655CB85BD7F2350D5663E770CBC8CE08294E8267D52A28438DFAD41722B3