Result for 0CFC20A38DA9F3F64FC03314BE6F5E22DC2DB386

Query result

Key	Value
MD5	F2DA0E368E40EF227EFE394699E1B043
PackageArch	ppc
PackageDescription	Port Scan Attack Detector (psad) is a collection of three lightweight system daemons written in Perl and in C that are designed to work with Linux iptables firewalling code to detect port scans and other suspect traffic. It features a set of highly configurable danger thresholds (with sensible defaults provided), verbose alert messages that include the source, destination, scanned port range, begin and end times, tcp flags and corresponding nmap options, reverse DNS info, email and syslog alerting, automatic blocking of offending ip addresses via dynamic configuration of iptables rulesets, and passive operating system fingerprinting. In addition, psad incorporates many of the tcp, udp, and icmp signatures included in the snort intrusion detection system (http://www.snort.org) to detect highly suspect scans for various backdoor programs (e.g. EvilFTP, GirlFriend, SubSeven), DDoS tools (mstream, shaft), and advanced port scans (syn, fin, xmas) which are easily leveraged against a machine via nmap. psad can also alert on snort signatures that are logged via fwsnort (http://www.cipherdyne.org/fwsnort/), which makes use of the iptables string match module to detect application layer signatures.
PackageMaintainer	Koji
PackageName	psad
PackageRelease	2.fc15
PackageVersion	2.1.7
SHA-1	0CFC20A38DA9F3F64FC03314BE6F5E22DC2DB386
SHA-256	8ACF914ED95B4802E498A9B0331EBE03F6762EF5E8CC9A3CD6B81687F0D5A01C
hashlookup:children-total	79
hashlookup:trust	50

Network graph view

Children (Total: 79)

The searched file hash includes 79 children files known and seen by metalookup. A sample is included below:

Key	Value
FileName	./etc/psad/snort_rules/netbios.rules
FileSize	284694
MD5	193B0746E301ACBD240D12C3D49BAE3A
SHA-1	048FBA50F380BF8D9307541A67451A305D052880
SHA-256	426B40D3BB18885480A8FEA89B6B4B3A336C5B8315ADD198361DE056CD9CC4BC
SSDEEP	1536:vDplxJ9MYUFQaBVR9tOoWr+yki0XkZ5tFIrz:QOoWr+yki00Z5tFIn
TLSH	T19054101D0FB6685CD7D48B6A04AB77C37205D761EC28A108374C6A9CEADCDB1D3E3269

Key	Value
FileName	./usr/bin/nf2csv
FileSize	19026
MD5	48C29330F2387850436009E37CB66099
SHA-1	05C7976B8C62E5B2D3EC138D577E7EC05633556F
SHA-256	A40C392F9BEA105393E6D624EA89C1D8FECEE7FF8F82B1BB770014D3F8512FDF
SSDEEP	192:m3hmfXzMdYT7A+d/cfwhKga9OPWfs3shC3iApOgx4/LJ50tEMyXQtnVViJNHSzUl:9fXwdYT7ndJLoA7VatFx
TLSH	T1D38272DA49D3A2D88A92E4D957DD905066AAC07738DBBC18BD3FC2D80F41538D3B23E5

Key	Value
FileName	./etc/psad/snort_rules/scan.rules
FileSize	4083
MD5	6857387086ABD7047DE15F0C5696FE19
SHA-1	05CE0898D4F6891ABBC68CB9BA7AA6D3A81B8A39
SHA-256	64B9CF0C34B052609DFE0F3685068936FBA855F79982FC89E48DA88776A3A7CB
SSDEEP	96:d6MA+8BJE4PqXlERhkiqO/mepfIei3VTDfj:d6MAzBJHPqX6RhkiqO/3fm3VTDfj
TLSH	T1BA81BE3C7FE958F807D6F334580EA697B46E9013AC651A1827DE132487C8DA0E1B63E7

Key	Value
CRC32	08289A7B
FileName	./usr/share/doc/psad/BENCHMARK
FileSize	3563
MD5	AE6C8419113F6B32A13048505A37F7F0
OpSystemCode	362
ProductCode	10075
RDS:package_id	10075
SHA-1	063DA4A16B4EB1AE35B10B1EF335E688B98DD522
SHA-256	E5CF54FFE87CD7E3F4F68C29314B75F5545C2CC93098F809F9160CEBE52DB2AA
SSDEEP	96:KX+SisMnDdD0RsYwZQY3ZV3jsH1a/T9+Ul5g9:KOSGLMo/TgUA9
SpecialCode
TLSH	T1DF718301BDBC3BA6318366323B3C7270C788A77D93242252D58DB1352349D6913F6B82
db	nsrl_legacy
insert-timestamp	1648735417.0709713
source	RDS_2022.03.1_legacy.db

Key	Value
FileName	./usr/share/man/man1/nf2csv.1.gz
FileSize	2044
MD5	66DC228967993E7290FBFE055F87C611
SHA-1	08BC2CDCA83C5663A50E893737870C355A3298A0
SHA-256	DFFD590472A4C3AC7915BD62C17EE549632D15D0CE8414A23D131977B5AC0BCB
SSDEEP	48:XBcAQnJvfOJcI2PqVjWKw78l58jI/gfbJlVLkfV4Dckwg:XQnkJcI2MS97052IyrKVmF
TLSH	T184412A3794A8433CDD11F91264E8D2EDFB191BB11679CB803BA24C92EE25DCE42D3785

Key	Value
FileName	./etc/psad/snort_rule_dl
FileSize	579
MD5	CD810FC134555BF716ECD57145B7BCDC
SHA-1	09BB91DE84C24ECDD768FB51881243BF67563853
SHA-256	96CCE371145FDF4565DDBE416064EF5F7CA116D86C2CA90C5BEE02C74A70BFDB
SSDEEP	6:LGgHWfhqs70pVKT94QAz63HDp4+XmBkLMS0qpyTBH5hqwZ7C17t69:LGSWfgH/Qx3DpwBOM4m5gwZ7yh6
TLSH	T167F0AB6383862457534141A5692EBB8D512042EFDF3714C232AE4F543B05E3275FEDC1

Key	Value
FileName	./etc/psad/snort_rules/nntp.rules
FileSize	3886
MD5	DAF26625D9291A24869C003A42F8677A
SHA-1	09BE25CA490DFDB932F2586C0890078185F97C17
SHA-256	7FBDC1AA2B72C3AB7A5E756E73EB4851EAE9AF30CF42D50A0706120790C461E3
SSDEEP	96:crvR3MrK3L3PXoGO3LCGh3PGY3zGb3qGC3J1Gl3UGn3m8TGE3vlCiI315Ib3xp5Z:crvRKKjXo7G4/BDuafTcEqWaNdmFuBpb
TLSH	T15E81DB1C1D914CB917EAE730146B675BB285E0229E704E03F3DA72598A5CCB681B36F7

Key	Value
FileName	./etc/logrotate.d/psad
FileSize	515
MD5	13E009156C9381BA19E6BBD62374C712
SHA-1	0AD0FB84D9D0DB6EF36F93968B34CFFB5CE45EAB
SHA-256	48125C7DA4C99E3D5FFCFA42922C4478A8B8997C1AB7232FE523CCDFB532476B
SSDEEP	6:YOeDIqpxcF39pCFWLB2JMi9eF1QZ6hQcdG0/R2FFWFdLwl:YjBxZFqBsENhPXo/mLwl
TLSH	T1C4F0AB0C155CBD322883D2C6522E4AC9A13814006B6908423B9EB6E96F2FE7057E4E68

Key	Value
FileName	./etc/psad/snort_rules/telnet.rules
FileSize	4251
MD5	A77307321D817B4FBC80FBBF7A30C679
SHA-1	0FFD2C7B6DB84D08287F0A3446C17C8846885641
SHA-256	D3E65CD8E3C1984B537A10276FD4EA7ECA3A13CD44E6E7985FBA1855CE98AF0B
SSDEEP	48:gQBl/D6kve9yCUvBhSxRXuwWcms5Xe8ZYafMGakKXXYatXLfYa9Ya9H0Zlp:v6AbSxRXuorNe+pfvMXXplLfp9p9I
TLSH	T1CE91331D5D6B8C7C07B1E634080B3747F29BC92288204F15A3851269C98EDE2D2B73F7

Key	Value
FileName	./etc/psad/snort_rules/web-frontpage.rules
FileSize	9475
MD5	E902E98C26C63E19A05627D6E56860FD
SHA-1	12841D9E8D16810102295F8B808A45CAEBB9C646
SHA-256	A764A30130C25AE42627D7C85C8797AC599B3DEB259C3A8D7E2BD5E53EF2C1B7
SSDEEP	48:gQBUHnwjYEWoD+fl7dmjlNZ++PPFT68/jVcV8T52WPRlbyjmfrkYsS5BAlBkfIOD:2wbDiHDUbmqLA/kgSaJm6rRFj7truN
TLSH	T1EB1201AE1E655CBC5BD7F2350D5663E770CBC8CE08294E8267D52A28438DFAD41722B3