Result for 35B6C018F6D39F5E4D90AAB662659E1CD6458F78

Query result

Key Value
FileName./usr/bin/nf2csv
FileSize18796
MD52516ADCB343BEA108A2BBE7AAE078DA4
SHA-135B6C018F6D39F5E4D90AAB662659E1CD6458F78
SHA-2568C7B3AC09FE741C225AB9D950EBDF1C008B84B9E524D25E016B6395E311B65C6
SSDEEP192:m3hmf9zM6YT76+d/cfwhKga9OPWfs3shC3iApOgx4/LJ50tEMyXQtnVViJNHSzUb:9f9w6YT71dJLoA7VaLFx
TLSHT1398272DA09D3A2D88A92E4D957DD905066AAC07738DBBC18BD7FC2D80F41538D3B23E5
hashlookup:parent-total9
hashlookup:trust95

Network graph view

Parents (Total: 9)

The searched file hash is included in 9 parent files which include package known and seen by metalookup. A sample is included below:

Key Value
FileSize174000
MD57448C8E82BF8FABB250919D9FAA26B6B
PackageDescriptionPort Scan Attack Detector PSAD is a collection of four lightweight system daemons (in Perl and C) designed to work with iptables to detect port scans. It features: * a set of highly configurable danger thresholds (with sensible defaults provided); * verbose alert messages that include the source, destination, scanned port range, beginning and end times, TCP flags, and corresponding Nmap options; * reverse DNS information; * alerts via email; * automatic blocking of offending IP addresses via dynamic firewall configuration. . When combined with fwsnort and the iptables string match extension, PSAD is capable of detecting many attacks described in the Snort rule set that involve application layer data.
PackageMaintainerFranck Joncourt <franck@debian.org>
PackageNamepsad
PackageSectionadmin
PackageVersion2.2.3-1
SHA-17FAECBAF933889DBD8CB1AF3B69A9EED53755888
SHA-256999D06FA31C84C994960C4B37A1BE766F8D0D760DC543009CAADE3D156555084
Key Value
FileSize148344
MD5A34AAEBA1EF2FEF372CB468E36357B1C
PackageDescriptionPort Scan Attack Detector PSAD is a collection of four lightweight system daemons (in Perl and C) designed to work with iptables to detect port scans. It features: * a set of highly configurable danger thresholds (with sensible defaults provided); * verbose alert messages that include the source, destination, scanned port range, beginning and end times, TCP flags, and corresponding Nmap options; * reverse DNS information; * alerts via email; * automatic blocking of offending IP addresses via dynamic firewall configuration. . When combined with fwsnort and the iptables string match extension, PSAD is capable of detecting many attacks described in the Snort rule set that involve application layer data.
PackageMaintainerUbuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
PackageNamepsad
PackageSectionadmin
PackageVersion2.2.3-1
SHA-198F86F8C64E5AD53A0752511B57484414DDCCFAA
SHA-2563671ECC9A7C154F8B510037AD3A78BC66596C024F380B278737A580D17DB14E2
Key Value
MD553DC41601D946AB2501A190798E01EC1
PackageArchi686
PackageDescriptionPort Scan Attack Detector (psad) is a collection of three lightweight system daemons written in Perl and in C that are designed to work with Linux iptables firewalling code to detect port scans and other suspect traffic. It features a set of highly configurable danger thresholds (with sensible defaults provided), verbose alert messages that include the source, destination, scanned port range, begin and end times, tcp flags and corresponding nmap options, reverse DNS info, email and syslog alerting, automatic blocking of offending ip addresses via dynamic configuration of iptables rulesets, and passive operating system fingerprinting. In addition, psad incorporates many of the tcp, udp, and icmp signatures included in the snort intrusion detection system (http://www.snort.org) to detect highly suspect scans for various backdoor programs (e.g. EvilFTP, GirlFriend, SubSeven), DDoS tools (mstream, shaft), and advanced port scans (syn, fin, xmas) which are easily leveraged against a machine via nmap. psad can also alert on snort signatures that are logged via fwsnort (http://www.cipherdyne.org/fwsnort/), which makes use of the iptables string match module to detect application layer signatures.
PackageMaintainerFedora Project
PackageNamepsad
PackageRelease1.el6
PackageVersion2.2.3
SHA-1459C58DF8CF444AA93CBF8950EDCADE37CF3D710
SHA-256A494161E94080CED44D902D7E73488B84D026ED96B3201AEEAA54C7F3D421B29
Key Value
FileSize172986
MD5364DDE300E17D62795C8F393E3E0297A
PackageDescriptionPort Scan Attack Detector PSAD is a collection of four lightweight system daemons (in Perl and C) designed to work with iptables to detect port scans. It features: * a set of highly configurable danger thresholds (with sensible defaults provided); * verbose alert messages that include the source, destination, scanned port range, beginning and end times, TCP flags, and corresponding Nmap options; * reverse DNS information; * alerts via email; * automatic blocking of offending IP addresses via dynamic firewall configuration. . When combined with fwsnort and the iptables string match extension, PSAD is capable of detecting many attacks described in the Snort rule set that involve application layer data.
PackageMaintainerFranck Joncourt <franck@debian.org>
PackageNamepsad
PackageSectionadmin
PackageVersion2.2.3-1
SHA-1E869097B6A82452DD643A9DEDCA4B3259C3FDF9E
SHA-256966EF26BADD3491C3B3DF1A00C243BCC3A3C840CBB55DA5A7F94878A1BE65AB5
Key Value
FileSize172316
MD513EAD4BA1CE4720BC2E4EC4FCC6E1E8C
PackageDescriptionPort Scan Attack Detector PSAD is a collection of four lightweight system daemons (in Perl and C) designed to work with iptables to detect port scans. It features: * a set of highly configurable danger thresholds (with sensible defaults provided); * verbose alert messages that include the source, destination, scanned port range, beginning and end times, TCP flags, and corresponding Nmap options; * reverse DNS information; * alerts via email; * automatic blocking of offending IP addresses via dynamic firewall configuration. . When combined with fwsnort and the iptables string match extension, PSAD is capable of detecting many attacks described in the Snort rule set that involve application layer data.
PackageMaintainerFranck Joncourt <franck@debian.org>
PackageNamepsad
PackageSectionadmin
PackageVersion2.2.3-1
SHA-1EFF0151478727ACC0048F604E75DEE6E5374CCE8
SHA-25651438D6C8C8FA8DA0CBA936EC013CA227692384F24C9B26B8EAEFA0E36D87508
Key Value
MD5EA39A13DE0A39F7094491B77BB621436
PackageArchx86_64
PackageDescriptionPort Scan Attack Detector (psad) is a collection of three lightweight system daemons written in Perl and in C that are designed to work with Linux iptables firewalling code to detect port scans and other suspect traffic. It features a set of highly configurable danger thresholds (with sensible defaults provided), verbose alert messages that include the source, destination, scanned port range, begin and end times, tcp flags and corresponding nmap options, reverse DNS info, email and syslog alerting, automatic blocking of offending ip addresses via dynamic configuration of iptables rulesets, and passive operating system fingerprinting. In addition, psad incorporates many of the tcp, udp, and icmp signatures included in the snort intrusion detection system (http://www.snort.org) to detect highly suspect scans for various backdoor programs (e.g. EvilFTP, GirlFriend, SubSeven), DDoS tools (mstream, shaft), and advanced port scans (syn, fin, xmas) which are easily leveraged against a machine via nmap. psad can also alert on snort signatures that are logged via fwsnort (http://www.cipherdyne.org/fwsnort/), which makes use of the iptables string match module to detect application layer signatures.
PackageMaintainerFedora Project
PackageNamepsad
PackageRelease1.el6
PackageVersion2.2.3
SHA-1A90A6CD3E12963BAA0712F06AC12553CD305CCAE
SHA-2561233346AE2143DA8930AA86D5A2BD4E777746FFBA0764F209D59A1A3E32317D5
Key Value
FileSize172752
MD5A65CA1BBEA694C4392A7AC6D286CF184
PackageDescriptionPort Scan Attack Detector PSAD is a collection of four lightweight system daemons (in Perl and C) designed to work with iptables to detect port scans. It features: * a set of highly configurable danger thresholds (with sensible defaults provided); * verbose alert messages that include the source, destination, scanned port range, beginning and end times, TCP flags, and corresponding Nmap options; * reverse DNS information; * alerts via email; * automatic blocking of offending IP addresses via dynamic firewall configuration. . When combined with fwsnort and the iptables string match extension, PSAD is capable of detecting many attacks described in the Snort rule set that involve application layer data.
PackageMaintainerFranck Joncourt <franck@debian.org>
PackageNamepsad
PackageSectionadmin
PackageVersion2.2.3-1
SHA-1C24B3EB75495E56AA1E3E325FC15DA4B50EA0CC9
SHA-25692BDF82AFA59EC7882C66505B6E00DC850B7ADAE1D120599B6A0CA54C1DDBF2C
Key Value
FileSize148184
MD52A2C41984A25848D37E46AB85275EA63
PackageDescriptionPort Scan Attack Detector PSAD is a collection of four lightweight system daemons (in Perl and C) designed to work with iptables to detect port scans. It features: * a set of highly configurable danger thresholds (with sensible defaults provided); * verbose alert messages that include the source, destination, scanned port range, beginning and end times, TCP flags, and corresponding Nmap options; * reverse DNS information; * alerts via email; * automatic blocking of offending IP addresses via dynamic firewall configuration. . When combined with fwsnort and the iptables string match extension, PSAD is capable of detecting many attacks described in the Snort rule set that involve application layer data.
PackageMaintainerUbuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
PackageNamepsad
PackageSectionadmin
PackageVersion2.2.3-1
SHA-1802694DEEBF3C75DA382A48D9C0BDA3DB47D63AA
SHA-256E0EFEDC63ACF2C7F52A0426A5C4B145E4AA1D172845632E515B90FDE7CD8ECF8
Key Value
MD5E4AFBB2FA51A546397B53C6F6CEDB1B0
PackageArchppc64
PackageDescriptionPort Scan Attack Detector (psad) is a collection of three lightweight system daemons written in Perl and in C that are designed to work with Linux iptables firewalling code to detect port scans and other suspect traffic. It features a set of highly configurable danger thresholds (with sensible defaults provided), verbose alert messages that include the source, destination, scanned port range, begin and end times, tcp flags and corresponding nmap options, reverse DNS info, email and syslog alerting, automatic blocking of offending ip addresses via dynamic configuration of iptables rulesets, and passive operating system fingerprinting. In addition, psad incorporates many of the tcp, udp, and icmp signatures included in the snort intrusion detection system (http://www.snort.org) to detect highly suspect scans for various backdoor programs (e.g. EvilFTP, GirlFriend, SubSeven), DDoS tools (mstream, shaft), and advanced port scans (syn, fin, xmas) which are easily leveraged against a machine via nmap. psad can also alert on snort signatures that are logged via fwsnort (http://www.cipherdyne.org/fwsnort/), which makes use of the iptables string match module to detect application layer signatures.
PackageMaintainerFedora Project
PackageNamepsad
PackageRelease1.el6
PackageVersion2.2.3
SHA-16A845E89454E573F32CC5EB2783E06C45E499302
SHA-256FA461A6C3F072CF0EE5EEBEC586E13EDDE883FCDBA071B66C8090D543C656AA0