sf

Tcpreplay is a suite of GPLv3 licensed utilities for UNIX (and Win32 nether Cygwin ) operating systems for editing as well as replaying network traffic which was previously captured past times tools similar tcpdump as well as Ethereal / Wireshark . It allows y'all to separate traffic equally customer or server, rewrite Layer 2, iii as well as four packets as well as in conclusion replay the traffic dorsum onto the network as well as through other devices such equally switches, routers, firewalls, NIDS as well as IPS's. Tcpreplay supports both unmarried as well as dual NIC modes for testing both sniffing as well as in-line devices. Tcpreplay is used past times numerous firewall, IDS, IPS, NetFlow as well as other networking vendors, enterprises, universities, labs as well as opened upwardly source projects. If your organization uses Tcpreplay, delight allow us know who y'all are as well as what y'all purpose it for as well as so that I tin proceed to add togethe...

Stenographer is a full-packet-capture utility for buffering packets to disk for intrusion detection as well as incident response purposes. It provides a high-performance implementation of NIC-to-disk packet writing, handles deleting those files equally disk fills up, as well as provides methods for reading dorsum specific sets of packets speedily as well as easily. It is designed to: Write packets to disk, really speedily ( 10Gbps on multi-core, multi-disk machines) Store equally much history equally it tin (managing disk usage, storing longer durations when traffic slows, as well as thus deleting the oldest packets when it hits disk limits) Read a really pocket-sized per centum (<1%) of packets from disk based on analyst needs It is NOT designed for: Complex packet processing (TCP flow reassembly, etc) It’s fast because it doesn’t practice this.  Even amongst the really minimal, single-pass processing of packets nosotros do, processing 1Gbps for indexing lo...

fwknop implements an authorisation scheme known every bit Single Packet Authorization (SPA) for strong service concealment. SPA requires only a unmarried bundle which is encrypted, non-replayable, as well as authenticated via an HMAC inwards gild to communicate desired access to a service that is hidden behind a firewall inwards a default-drop filtering stance. The principal application of SPA is to utilisation a firewall to drib all attempts to connect to services such every bit SSH inwards gild to brand the exploitation of vulnerabilities (both 0-day as well as unpatched code) to a greater extent than difficult. Because at that topographic point are no opened upwards ports, whatever service that is concealed past times SPA naturally cannot endure scanned for amongst Nmap. The fwknop projection supports 4 unlike firewalls: iptables, firewalld, PF, as well as ipfw across Linux, OpenBSD, FreeBSD, as well as Mac OS X. There is every bit good back upwards for custom scripts so that f...