Result for 2D2948766214EED535DF4CB86A146DA55A83BA2B

Query result

Key Value
FileName./usr/sbin/psadwatchd
FileSize67592
MD580725BB874C7CBB019901C8BA39E2B2C
SHA-12D2948766214EED535DF4CB86A146DA55A83BA2B
SHA-256A75BB81F193DB795091E1AEB77803CF7386A19A6CADBED12291AAE09B71CA5B7
SSDEEP1536:XiEFHAhKbkV+PYJiD89W3wxaLUlO/IZbtm1UFvM4KvmT:h1UJM4Kvm
TLSHT10C63D677321CAB15EB57A43B8B8C6520B3523C8F276057177468532F6FEE709CE52A22
hashlookup:parent-total1
hashlookup:trust55

Network graph view

Parents (Total: 1)

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key Value
FileSize180004
MD550CA7669548668A1AB6BF3C0BA4D3D56
PackageDescriptionPort Scan Attack Detector PSAD is a collection of four lightweight system daemons (in Perl and C) designed to work with iptables to detect port scans. It features: * a set of highly configurable danger thresholds (with sensible defaults provided); * verbose alert messages that include the source, destination, scanned port range, beginning and end times, TCP flags, and corresponding Nmap options; * reverse DNS information; * alerts via email; * automatic blocking of offending IP addresses via dynamic firewall configuration. . When combined with fwsnort and the iptables string match extension, PSAD is capable of detecting many attacks described in the Snort rule set that involve application layer data.
PackageMaintainerDebian QA Group <packages@qa.debian.org>
PackageNamepsad
PackageSectionadmin
PackageVersion2.4.6-1
SHA-151DC5C39CBD129B8F4021B185E7F6820C2E5E351
SHA-2568CC3D8190427387592A010DCE12BCFE6BDC2E361B8B4204302761ED8290A0AA0