FreeBSD security  : find_ddos
Scans a host filesystem for distributed denial of service programs
In response to a number of distributed denial-of-service (DDOS) attacks that
have been reported, the National Infrastructure Proctection Center (NIPC)
Special Technology Applications Unit (STAU) has developed a tool to assist in
combating this threat. ``find_ddos'' is intended to scan a local system that
is either known or suspected to contain a DDOS program.
``find_ddos'' will detect tfn2k client, tfn2k daemon, trinoo daemon, trinoo
master, tfn daemon, tfn client, stacheldraht master, stacheldraht client,
stachelddraht demon and tfn-rush client.
http://www.nipc.gov/warnings/alerts/1999/trinoo.htm
|
find_ddos history
v. 1.14
date: 2003/02/20 18:59:04; author: knu; state: Exp; lines: +1 -0
De-pkg-comment.
v. 1.13
date: 2002/11/10 16:47:49; author: lioux; state: Exp; lines: +0 -2
o Rollback PORTCOMMENT modifications while this feature's implementation
is better studied
o Turn PORTCOMMENT variable in Makefile back into pkg-comment files
Approved by: kris (portmgr hat),
portmgr, re (silence)
v. 1.12
date: 2002/11/07 11:35:51; author: arved; state: Exp; lines: +2 -2
Don't strip Linux binaries
Reported by: Dustin , kris
PR: 30562
v. 1.11
date: 2002/11/06 22:46:47; author: adamw; state: Exp; lines: +2 -0
Use PORTCOMMENT in the Makefile, and whack the pkg-comment.
Approved by: pat
v. 1.10
date: 2002/10/27 22:32:48; author: adamw; state: Exp; lines: +4 -3
Fix MASTER_SITES, utilize ${DOCSDIR} in the Makefile, and
%%PORTDOCS%% in the pkg-plist.
PR: 44486
Submitted by: KATO Tsuguru
Approved by: pat
v. 1.9
date: 2002/08/22 01:37:01; author: kevlo; state: Exp; lines: +2 -2
Update MASTER_SITES
PR: 41869
Submitted by: Josef El-Rayes
v. 1.8
date: 2002/05/08 21:32:37; author: obrien; state: Exp; lines: +2 -2
To ports@freebsd.org.
v. 1.7
date: 2001/01/10 16:14:54; author: obrien; state: Exp; lines: +6 -4
Update to 4.2.
Submitted by: Joseph Scott
v. 1.6
date: 2000/08/08 02:45:14; author: steve; state: Exp; lines: +3 -1
Mark this port as 'ONLY_FOR_ARCHS=i386' as it contains an i386 binary.
v. 1.5
date: 2000/04/21 08:18:19; author: mharo; state: Exp; lines: +2 -2
Correct whitespace introduced during PORTNAME conversion and portlint
v. 1.4
date: 2000/04/09 18:29:35; author: cpiazza; state: Exp; lines: +4 -4
Update with the new PORTNAME/PORTVERSION variables
v. 1.3
date: 2000/03/22 00:26:51; author: obrien; state: Exp; lines: +2 -1
Restore useless version required comments.
v. 1.2
date: 2000/03/20 02:36:21; author: obrien; state: Exp; lines: +1 -2
Remove the "version required" line.
v. 1.1
date: 2000/02/14 02:22:45; author: obrien; state: Exp;
branches: 1.1.1;
Initial revision
v. 1.1.1.1
date: 2000/02/14 02:22:45; author: obrien; state: Exp; lines: +0 -0
``find_ddos'' will detect these denial of service programs: tfn2k client,
tfn2k daemon, trinoo daemon, trinoo master, tfn daemon, tfn client,
stacheldraht master, stacheldraht client, stachelddraht demon and tfn-rush
client.
=============================================================================
v. 1.14
date: 2003/02/20 18:59:04; author: knu; state: Exp; lines: +1 -0
De-pkg-comment.
v. 1.13
date: 2002/11/10 16:47:49; author: lioux; state: Exp; lines: +0 -2
o Rollback PORTCOMMENT modifications while this feature's implementation
is better studied
o Turn PORTCOMMENT variable in Makefile back into pkg-comment files
Approved by: kris (portmgr hat),
portmgr, re (silence)
v. 1.12
date: 2002/11/07 11:35:51; author: arved; state: Exp; lines: +2 -2
Don't strip Linux binaries
Reported by: Dustin , kris
PR: 30562
v. 1.11
date: 2002/11/06 22:46:47; author: adamw; state: Exp; lines: +2 -0
Use PORTCOMMENT in the Makefile, and whack the pkg-comment.
Approved by: pat
v. 1.10
date: 2002/10/27 22:32:48; author: adamw; state: Exp; lines: +4 -3
Fix MASTER_SITES, utilize ${DOCSDIR} in the Makefile, and
%%PORTDOCS%% in the pkg-plist.
PR: 44486
Submitted by: KATO Tsuguru
Approved by: pat
v. 1.9
date: 2002/08/22 01:37:01; author: kevlo; state: Exp; lines: +2 -2
Update MASTER_SITES
PR: 41869
Submitted by: Josef El-Rayes
v. 1.8
date: 2002/05/08 21:32:37; author: obrien; state: Exp; lines: +2 -2
To ports@freebsd.org.
v. 1.7
date: 2001/01/10 16:14:54; author: obrien; state: Exp; lines: +6 -4
Update to 4.2.
Submitted by: Joseph Scott
v. 1.6
date: 2000/08/08 02:45:14; author: steve; state: Exp; lines: +3 -1
Mark this port as 'ONLY_FOR_ARCHS=i386' as it contains an i386 binary.
v. 1.5
date: 2000/04/21 08:18:19; author: mharo; state: Exp; lines: +2 -2
Correct whitespace introduced during PORTNAME conversion and portlint
v. 1.4
date: 2000/04/09 18:29:35; author: cpiazza; state: Exp; lines: +4 -4
Update with the new PORTNAME/PORTVERSION variables
v. 1.3
date: 2000/03/22 00:26:51; author: obrien; state: Exp; lines: +2 -1
Restore useless version required comments.
v. 1.2
date: 2000/03/20 02:36:21; author: obrien; state: Exp; lines: +1 -2
Remove the "version required" line.
v. 1.1
date: 2000/02/14 02:22:45; author: obrien; state: Exp;
branches: 1.1.1;
Initial revision
v. 1.1.1.1
date: 2000/02/14 02:22:45; author: obrien; state: Exp; lines: +0 -0
``find_ddos'' will detect these denial of service programs: tfn2k client,
tfn2k daemon, trinoo daemon, trinoo master, tfn daemon, tfn client,
stacheldraht master, stacheldraht client, stachelddraht demon and tfn-rush
client.
=============================================================================
v. 1.14
date: 2003/02/20 18:59:04; author: knu; state: Exp; lines: +1 -0
De-pkg-comment.
v. 1.13
date: 2002/11/10 16:47:49; author: lioux; state: Exp; lines: +0 -2
o Rollback PORTCOMMENT modifications while this feature's implementation
is better studied
o Turn PORTCOMMENT variable in Makefile back into pkg-comment files
Approved by: kris (portmgr hat),
portmgr, re (silence)
v. 1.12
date: 2002/11/07 11:35:51; author: arved; state: Exp; lines: +2 -2
Don't strip Linux binaries
Reported by: Dustin , kris
PR: 30562
v. 1.11
date: 2002/11/06 22:46:47; author: adamw; state: Exp; lines: +2 -0
Use PORTCOMMENT in the Makefile, and whack the pkg-comment.
Approved by: pat
v. 1.10
date: 2002/10/27 22:32:48; author: adamw; state: Exp; lines: +4 -3
Fix MASTER_SITES, utilize ${DOCSDIR} in the Makefile, and
%%PORTDOCS%% in the pkg-plist.
PR: 44486
Submitted by: KATO Tsuguru
Approved by: pat
v. 1.9
date: 2002/08/22 01:37:01; author: kevlo; state: Exp; lines: +2 -2
Update MASTER_SITES
PR: 41869
Submitted by: Josef El-Rayes
v. 1.8
date: 2002/05/08 21:32:37; author: obrien; state: Exp; lines: +2 -2
To ports@freebsd.org.
v. 1.7
date: 2001/01/10 16:14:54; author: obrien; state: Exp; lines: +6 -4
Update to 4.2.
Submitted by: Joseph Scott
v. 1.6
date: 2000/08/08 02:45:14; author: steve; state: Exp; lines: +3 -1
Mark this port as 'ONLY_FOR_ARCHS=i386' as it contains an i386 binary.
v. 1.5
date: 2000/04/21 08:18:19; author: mharo; state: Exp; lines: +2 -2
Correct whitespace introduced during PORTNAME conversion and portlint
v. 1.4
date: 2000/04/09 18:29:35; author: cpiazza; state: Exp; lines: +4 -4
Update with the new PORTNAME/PORTVERSION variables
v. 1.3
date: 2000/03/22 00:26:51; author: obrien; state: Exp; lines: +2 -1
Restore useless version required comments.
v. 1.2
date: 2000/03/20 02:36:21; author: obrien; state: Exp; lines: +1 -2
Remove the "version required" line.
v. 1.1
date: 2000/02/14 02:22:45; author: obrien; state: Exp;
branches: 1.1.1;
Initial revision
v. 1.1.1.1
date: 2000/02/14 02:22:45; author: obrien; state: Exp; lines: +0 -0
``find_ddos'' will detect these denial of service programs: tfn2k client,
tfn2k daemon, trinoo daemon, trinoo master, tfn daemon, tfn client,
stacheldraht master, stacheldraht client, stachelddraht demon and tfn-rush
client.
=============================================================================
|
