Result for 6801112F067BC6B41BCC04CFBACD492BF26CE017

Query result

Key Value
FileNamepsad-fedora.patch
FileSize2818
MD580F9AFBAF9DBF1067103B330C20C8444
SHA-16801112F067BC6B41BCC04CFBACD492BF26CE017
SHA-256F479AA751ECDD8AD356694F93401626521F0C8F640579E7CCBFBB239D02F009A
SSDEEP48:RI5IQIPvIRYUSpIEUemT27R2jLfiLxkLrkaGzfe+xEN7hu2bod:RSDEaY9QRsu+fe+K743
TLSHT175517473DC563CF7581EA1104B6A7D56936130E22BC9B17473EE1E81935F9C5920BB03
hashlookup:parent-total3
hashlookup:trust65

Network graph view

Parents (Total: 3)

The searched file hash is included in 3 parent files which include package known and seen by metalookup. A sample is included below:

Key Value
MD551B0ADB24E4CE5E14E468AA1865E81C6
PackageArchnoarch
PackageDescriptionPort Scan Attack Detector (psad) is a lightweight system daemon written in Perl designed to work with Linux iptables firewalling code to detect port scans and other suspect traffic. It features a set of highly configurable danger thresholds (with sensible defaults provided), verbose alert messages that include the source, destination, scanned port range, begin and end times, tcp flags and corresponding nmap options, reverse DNS info, email and syslog alerting, automatic blocking of offending ip addresses via dynamic configuration of iptables rulesets, and passive operating system fingerprinting. In addition, psad incorporates many of the tcp, udp, and icmp signatures included in the snort intrusion detection system (https://www.snort.org) to detect highly suspect scans for various backdoor programs (e.g. EvilFTP, GirlFriend, SubSeven), DDoS tools (mstream, shaft), and advanced port scans (syn, fin, xmas) which are easily leveraged against a machine via nmap. psad can also alert on snort signatures that are logged via fwsnort (https://www.cipherdyne.org/fwsnort/), which makes use of the iptables string match module to detect application layer signatures.
PackageMaintainerFedora Project
PackageNamepsad
PackageRelease8.fc34
PackageVersion2.4.6
SHA-1B0EA198F1414940BD80D0D6A02D2C3B7B30FD0CD
SHA-256CA376B47520E02BD5977A98C42306EED00C1D38CB34025C91905A07C304EB197
Key Value
MD5CE36E42FDABF1A8C21CC1160690C3DC5
PackageArchnoarch
PackageDescriptionPort Scan Attack Detector (psad) is a lightweight system daemon written in Perl designed to work with Linux iptables firewalling code to detect port scans and other suspect traffic. It features a set of highly configurable danger thresholds (with sensible defaults provided), verbose alert messages that include the source, destination, scanned port range, begin and end times, tcp flags and corresponding nmap options, reverse DNS info, email and syslog alerting, automatic blocking of offending ip addresses via dynamic configuration of iptables rulesets, and passive operating system fingerprinting. In addition, psad incorporates many of the tcp, udp, and icmp signatures included in the snort intrusion detection system (https://www.snort.org) to detect highly suspect scans for various backdoor programs (e.g. EvilFTP, GirlFriend, SubSeven), DDoS tools (mstream, shaft), and advanced port scans (syn, fin, xmas) which are easily leveraged against a machine via nmap. psad can also alert on snort signatures that are logged via fwsnort (https://www.cipherdyne.org/fwsnort/), which makes use of the iptables string match module to detect application layer signatures.
PackageMaintainerFedora Project
PackageNamepsad
PackageRelease6.fc32
PackageVersion2.4.6
SHA-19BB9931D0B72B13241A054FAD35007629728E915
SHA-256FD92DB9F67F9121196510B3101EC7832197BE1E39D50431A35113A1B637C9E4C
Key Value
MD5CFFC19AACCDDE489A1276954AF2958A4
PackageArchnoarch
PackageDescriptionPort Scan Attack Detector (psad) is a lightweight system daemon written in Perl designed to work with Linux iptables firewalling code to detect port scans and other suspect traffic. It features a set of highly configurable danger thresholds (with sensible defaults provided), verbose alert messages that include the source, destination, scanned port range, begin and end times, tcp flags and corresponding nmap options, reverse DNS info, email and syslog alerting, automatic blocking of offending ip addresses via dynamic configuration of iptables rulesets, and passive operating system fingerprinting. In addition, psad incorporates many of the tcp, udp, and icmp signatures included in the snort intrusion detection system (https://www.snort.org) to detect highly suspect scans for various backdoor programs (e.g. EvilFTP, GirlFriend, SubSeven), DDoS tools (mstream, shaft), and advanced port scans (syn, fin, xmas) which are easily leveraged against a machine via nmap. psad can also alert on snort signatures that are logged via fwsnort (https://www.cipherdyne.org/fwsnort/), which makes use of the iptables string match module to detect application layer signatures.
PackageMaintainerFedora Project
PackageNamepsad
PackageRelease7.fc33
PackageVersion2.4.6
SHA-1F5781FCDA67ECAE8B2FD605E2D9C2271925DC94D
SHA-25664BA0FFAB239F65CFDE7B97733A0F3605C8A6E7BA4F4A9E46B79C85CA9792957