./security/ddos-scan, Scan for a limited set of distributed denial of service (ddos) agents

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2010Q4, Version: 20000325, Package name: ddos-scan-20000325, Maintainer: pkgsrc-users

"dds" is a program to scan for a limited set of distributed denial of
service (ddos) agents.

At present, it scans for active instances of "trinoo", "Tribe Flood
Network" ("TFN") and "stacheldraht" agents, which were compiled
using the default values in known source distributions, such as those
found at:

http://packetstorm.securify.com/distributed/

It will *not* detect TFN2K agents.

For analyses of the three distributed denial of service attack
tools it scans for, and the methods being used by dds to identify
them, see:

http://staff.washington.edu/dittrich/misc/trinoo.analysis
http://staff.washington.edu/dittrich/misc/tfn.analysis
http://staff.washington.edu/dittrich/misc/stacheldraht.analysis

See CHECKSUMS.asc for PGP signed MD5 checksums.

Master sites:

SHA1: 97e695f19df0edef4d833afb8114b24822e3db27
RMD160: 5aedea63bbcf357b8084d8e0e6ad0a4294ba3ba3
Filesize: 30 KB

Version history: (Expand)