1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
|
Source: portsentry
Maintainer: Marcus Hufvudsson <mh@protohuf.com>
Section: net
Priority: optional
Build-Depends: debhelper-compat (= 13), cmake, libpcap-dev, pkgconf, systemd-dev
Standards-Version: 4.7.2
Vcs-Browser: https://salsa.debian.org/debian/portsentry
Vcs-Git: https://salsa.debian.org/debian/portsentry.git
Homepage: https://portsentry.xyz
Rules-Requires-Root: binary-targets
Package: portsentry
Architecture: any
Depends: ${shlibs:Depends},
${misc:Depends},
logrotate
Recommends: fail2ban
Description: Port scan detection and response tool
Portsentry monitors network traffic in order to detect port scans in real-time.
It can identify several types of scans, including TCP, SYN, FIN, XMAS, NULL
scans and UDP probing. It can automatically add the attacker's IP address to
the system's firewall or access control list, effectively blocking any further
connections from that IP. It can log the details of the scan attempt,
including the source IP address, timestamp, and type of scan detected.
This information can be useful for forensic analysis and monitoring.
|
