Main > Free Download Search >

Free 192.168 1.1 software for linux

192.168 1.1

Sponsored Links
Sponsored Links
Secleted [ 0 ] software to compare
Results 1 - 15 of about 1320
NSTX 1.1

NSTX 1.1


NSTX (the Nameserver Transfer Protocol) makes it possible to create IP tunnels using DNS queries. more>>
NSTX (the Nameserver Transfer Protocol) makes it possible to create IP tunnels using DNS queries and replies for IP packet encapsulation where IP traffic other than DNS isnt possible.
You need to have the ethertap-dev up and running on both sides of the tunnel. Configure e.g. 192.168.0.1 on one ethertap and 192.168.0.2 on the other end. Then create a netroute for 192.168.0.0/24 through the ethertap (on both sides). Client and server both will know that the ethertap-sevice is /dev/tap0.
Then start the server on one end:
./nstxd tun.yomama.com
and the client on the other end:
./nstxcd tun.yomama.com 125.23.53.12
125.23.53.12 has to be a DNS-server which can be reached by the client-side. The server *must* run on a server where an NS-record for tun.yomama.com points to. So if the server has the IP 1.2.3.4 there must exist an entry in the zonefile of yomama.com: tun IN NS 1.2.3.4
Enhancements:
- extensive const-poisoning;
- removal of some of the unused functions;
- switch from `LINUX to `linux -- a define provided by the compiler automaticly on Linux;
- use of syslog(3) instead of printfs for debugging;
- chroot-ing into a specified directory and setuid-ing to a specified uid after initialization (nstxd only for now, nstxcd should have this too) -- the daemons should, probably, refuse to run as root after initializing.
<<less
Download (0.020MB)
Added: 2006-07-04 License: GPL (GNU General Public License) Price:
1209 downloads
ICMPScan 1.1

ICMPScan 1.1


ICMPScan scans the specified address, or addresses, for ICMP responses. more>>
ICMPScan scans the specified address, or addresses, for ICMP responses.

Usage:

icmpscan [ -EPTSNMAIRcvbn ] [ -A address ] [ -f filename ] [ -i interface ] [ -r retries ] [ -t timeout ] target [...]

Options:

-i, --interface
Listen on the specified interface. If unspecified, icmpscan will examine the routing table and select the most appropriate interface for each target address.
-c, --promisc
Put in interface into promiscuous mode. As this option increases the load on the system in general, it should only be used if spoofing of source packets address is enabled with the "-A" option.
-A, --address
Specify the source IP address of generated packets.
-t, --timeout
Specify the timeout, in milli-seconds, before retrying.
-r, --retries
Specify the number of attempts to elicit a particular ICMP response.
-f, --file
Read target list from the specified file.
-E, -P, --echo, --ping
Check of ICMP Echo responses.
-T, -S, --timestamp
Check for ICMP Timestamp responses.
-N, -M, --netmask
Check for ICMP Netmask responses.
-I, --info
Check for ICMP Info responses.
-R, --router
Check for ICMP Router Solicitation responses.
-v, --verbose
Increase the output verbosity.
-B, --debug

Target Specification

The simplest case is listing single hostnames or IP addresses on the command line. If you want to scan a subnet of IP addresses, you can append /mask to the hostname or IP address. mask must be between 0 (scan the whole Internet) and 32 (scan the single host specified). Use /24 to scan a class "C" address and /16 for a class "B". There is also a more powerful notation which lets you specify an IP address using lists/ranges for each element. Thus you can scan the whole class "B" network 192.168.*.* by specifying "192.168.*.*" or "192.168.0-255.0-255" or even "192.168.1-50,51-255.1,2,3,4,5-255". And of course you can use the mask notation: "192.168.0.0/16". These are all equivalent. If you use asterisks ("*"), remember that most shells require you to escape them with back slashes or protect them with quotes.

Examples:

The following example checks the first 16 addresses in the 192.168.1.0/24 netblock for all ICMP responses. The scan speed is increased by lowering the timeout value and setting the number of retries to 1:

> icmpscan -t 500 -r 1 192.168.1.0-16
192.168.1.0: Echo (From 192.168.1.17!)
192.168.1.0: Address Mask [255.255.255.0] (From 192.168.1.17!)
192.168.1.7: Echo
192.168.1.7: Timestamp [0x03ab2db0, 0x02d4c507, 0x02d4c507]
192.168.1.7: Address Mask [255.255.255.0]
192.168.1.8: Echo
192.168.1.8: Address Mask [255.255.255.0]
To display failed probes, increase the output verbosity:

> icmpscan -v 192.168.1.1
192.168.1.1: -- No response to Echo request --
192.168.1.1: -- No response to Timestamp request --
192.168.1.1: -- No response to Netmask request --
192.168.1.1: -- No response to Info request --
192.168.1.1: -- No response to Router Solicitation request --
Individual ICMP types can be checked for by listing their corresponding flags on the command line:

> icmpscan -v --echo --netmask 192.168.1.7
192.168.1.7: Echo
192.168.1.7: Address Mask [255.255.255.0]

<<less
Download (0.044MB)
Added: 2007-08-22 License: GPL (GNU General Public License) Price:
794 downloads
NBTScan 1.5.1

NBTScan 1.5.1


NBTScan is a NetBIOS Name Network Scanner. more>>
NBTScan is a NetBIOS Name Network Scanner.
NBTscan is a program for scanning IP networks for NetBIOS name information. It sends NetBIOS status query to each address in supplied range and lists received information in human readable form. For each responded host it lists IP address, NetBIOS computer name, logged-in user name and MAC address.
NBTscan compiles and runs on Unix and Windows. I have tested it on Windows NT 4.0, Windows 2000, FreeBSD 4.3, OpenBSD 2.8 and RedHat Linux 7.1 and 7.3. It should also compile and run on Solaris and other Linuxes as well.
Steve Coleman (Steve (dot) Coleman (at) jhuapl (dot) edu) ported previous versions of NBTscan to Solaris, HP-UX and OSF/1 and fixed several bugs. He reports that NBTscan also runs on IRIX/SGI with minor problems. I was also told that NBTscan runs on AIX (Antonio Dellelce) and SunOS 4.1.3_U1 (Joe Cline). Mohammad A. Haque (mhaque (at) haque (dot) net) ported nbtscan to Darwin.
This program is a successor of a perl script with the same name and does essentially the same thing, being much faster though. NBTscan produces a report like that:
IP address NetBIOS Name Server User MAC address
------------------------------------------------------------------------------
192.168.1.2 MYCOMPUTER JDOE 00-a0-c9-12-34-56
192.168.1.5 WIN98COMP RROE 00-a0-c9-78-90-00
192.168.1.123 DPTSERVER ADMINISTRATOR 08-00-09-12-34-56
First column lists IP address of responded host. Second column is computer name. Third column indicates if this computer shares or is able to share files or printers. For NT machine it means that Server Service is running on this computer.
Most often it means that this computer shares files. Third column shows user name. If no one is logged on from this computer it is same as computer name. Last column shows adapter MAC address.
If run with -v switch NBTscan lists whole NetBIOS name table for each responded address. The output looks like that:
NetBIOS Name Table for Host 192.168.1.123:
Name Service Type
----------------------------------------
DPTSERVER < 00 > UNIQUE
DPTSERVER < 20 > UNIQUE
DEPARTMENT < 00 > GROUP
DEPARTMENT < 1c > GROUP
DEPARTMENT < 1b > UNIQUE
DEPARTMENT < 1e > GROUP
DPTSERVER < 03 > UNIQUE
DEPARTMENT < 1d > UNIQUE
??__MSBROWSE__? < 01 > GROUP
INet~Services < 1c > GROUP
IS~DPTSERVER < 00 > UNIQUE
DPTSERVER < 01 > UNIQUE
Adapter address: 00-a0-c9-12-34-56
Installation:
- Ungzip and untar sources
- Run ./configure script
- Run make and make install
- Thats all.
Enhancements:
- Fixed segmentation fault when using -f option (noticed by Brian Lovrin)
- Fixed printing ugliness (noticed by Darren Critchley)
- Changed version number :) (1.5 said that it is 1.0.3 - now it proudly says 1.5.1)
<<less
Download (0.080MB)
Added: 2006-03-03 License: GPL (GNU General Public License) Price:
1343 downloads
rdns 1.0

rdns 1.0


rdns provides a tiny little UNIX utility that will preform reverse dns lookups. more>>
rdns provides a tiny little UNIX utility that will preform reverse dns lookups.

This simple little program takes an IP address as an argument, and spits out the hostname that it finds. Its a simple little program designed to be used in scripts, primarily.

Syntax:
rdns [-s]

Optionally, you can append -s onto the command line. This will prevent rdns from printing any available aliases.

Note: Sometimes rdns will just seem to hang there during the gethostbyname() call. This usually occurs when you try to resolve addresses private IP addresses, like 192.168.*, 10.* and so forth. This is usually BAD for scripting, so try to have all the possible hosts in your /etc/hosts.
<<less
Download (0.008MB)
Added: 2007-04-20 License: GPL (GNU General Public License) Price:
921 downloads
levy 1.22

levy 1.22


levy is a perl script which generates a basic iptables rulesets based on a given external interface. more>>
levy is a perl script which generates a basic iptables rulesets based on a given external interface and a set of ports to open. Its design is to save folks some time in creating a skeleton ruleset to work from, though it can construct a fully functional firewall with NAT support.
levy has several run-time options to control what sorts of rulesets to generate: see levy.pl -h for a full list.
Here are some examples for usage:
I want a basic firewall which allows in ports 22, 80, 113 (matching their protocols), logs all dropped connections, aggressively defines reserved addresses, and provides NAT for 192.168.0.0/16. My interface to the internet is eth0 --
./levy.pl eth0 22 80 113 -l -r -m -n 192.168.0.0/16 > firewall.rules
After testing this ruleset, I decide its fine, though I want to open https (443) and set the output as a shell script I can just run:
./levy.pl eth0 22 80 113 143 -e -l -r -m -n 192.168.0.0/16 > firewall.rc
Main features:
- Levy supports creating a restrictive firewall with specific public services, defined subnets for NAT, and defined trusted networks.
<<less
Download (0.009MB)
Added: 2006-07-08 License: Artistic License Price:
1203 downloads
GenIP 1.0

GenIP 1.0


GenIP is a small utility, based on the NMap target specification code, for quickly and easily generating lists of IP addresses. more>>
GenIP is a small utility, based on the NMap target specification code, for quickly and easily generating lists of IP addresses.

Usage:

genip [ -h ] [ -i filename ] [ < target-spec > ... ]
genip -r < ipaddress > < ipaddress >

Options:

-h
Display uage information.
-i
Read target specifications from the give filename. If a filename of "-" used, target specifications are read from standard in. Target specifications read from input files are processed in NMap mode regardless of the presence of the -r option.
-r
Specify range mode (see below).

Modes:

GenIP has two modes of operation that are detailed below:

NMap Mode (Default)

In this mode genip will expand all target specifications listed on the command line. Since genip is essentially just the NMap target parsing code it functions in exactly the same way. Here is what the NMap documentation has to say about target specification:

Everything that isnt an option (or option argument) is treated as a target host specification. The simplest case is listing single hostnames or IP addresses on the command line. If you want to scan a subnet of IP addresses, you can append /mask to the hostname or IP address. mask must be between 0 (scan the whole Internet) and 32 (scan the single host specified). Use /24 to scan a class "C" address and /16 for a class "B". There is also a more powerful notation which lets you specify an IP address using lists/ranges for each element. Thus you can scan the whole class "B" network 192.168.*.* by specifying "192.168.*.*" or "192.168.0-255.0-255" or even "192.168.1-50,51-255.1,2,3,4,5-255". And of course you can use the mask notation: "192.168.0.0/16". These are all equivalent. If you use asterisks ("*"), remember that most shells require you to escape them with back slashes or protect them with quotes.

Range Mode

In this mode two (and only two!) IP addresses must be specified, in dotted quad notation, and the output is all the addresses between the two (inclusive). This mode can be used to cross class boundaries.

Example:

In its most basic form genip simply echos the IP addresses listed on the command line:

> genip 10.1.1.1 10.3.4.5
10.1.1.1
10.3.4.5

By use one of the many expansion methods detailed above a large number of IP addresses can be generated from simple command line specifications:

> genip 10.1.1.1-3
10.1.2.0
10.1.2.1
10.1.2.2

By selecting range mode (with the use of the -r flag) it is a simple matter to generate address lists that cross class boundaries:

> genip -r 10.1.1.254 10.1.2.2
10.1.1.254
10.1.1.255
10.1.2.0
10.1.2.1
10.1.2.2
<<less
Download (0.011MB)
Added: 2007-08-18 License: GPL (GNU General Public License) Price:
798 downloads
ipt_ACCOUNT 1.10

ipt_ACCOUNT 1.10


ipt_ACCOUNT is a high performance local network accounting system written for the Linux netfilter/iptables system. more>>
ipt_ACCOUNT is a high performance local network accounting system written for the Linux netfilter/iptables system.
It has just two parameters:
addr is the subnet which is accounted for
tname is the table name where the information is stored
The data can be queried later using the libipt_ACCOUNT userspace library or by the "iptaccount" tool which is part of the libipt_ACCOUNT package.
A special subnet is "0.0.0.0/0": All data is stored in the src_bytes and src_packets structure of slot "0". This is useful if you want to account the overall traffic to/from your internet provider.
pt_ACCOUNT is designed to be queried for data every second or at least every ten seconds. It is written as kernel module to handle high bandwidths without packet loss.
The largest possible subnet size is 24 bit, meaning f.e. 10.0.0.0/8 networks. Therefore its able to use a fixed internal data structures which speeds up the processing speed for each packet. Furthermore, accounting data for one complete 192.168.1.X/24 network takes 4kb of memory. Memory for 16 or 24 bit networks is only allocated when needed.
The data is queried using the userspace libipt_ACCOUNT library. There is no /proc interface as it would be too slow for continuous access. The read&flush query operation is the fastest, as no internal data snapshot needs to be created&copied for all data. Use the "read" operation without flush only for debugging purposes!
To optimize the kerneluserspace data transfer a bit more, the kernel module only transfers information about IPs, where the src/dst packet counter is not 0. This saves precious kernel time.
Install the pom-ng-ipt_ACCOUNT archive in your patch-o matic-ng directory
Patch your kernel (./runme ACCOUNT)
Patch the userspace iptabels tool with the iptables-ext ipt_ACCOUNT.patch
Recompile the kernel
Recompile iptables tool
Unpack the libipt_ACCOUNT library archive
Run autoreconf -f
./configure && make && make install
You can also install&build the provided .src.prm
Enhancements:
- Linux kernel 2.6.22 support was added.
<<less
Download (0.020MB)
Added: 2007-07-26 License: GPL (GNU General Public License) Price:
821 downloads
mpscan 0.1.0

mpscan 0.1.0


mpscan is a parallel network scanner that checks for open ports. more>>
mpscan is a parallel network scanner that checks for open ports. It uses select() to increase its speed and was designed for rapidly scanning large networks, but could work with a single IP.

usage: mpscan [-V] | [-h] | [-v] [-t sec] [-p N] [-e N] IP
-V Prints Version
-h show this usage message
-v verbose, -vvv more verbose
-t timeout sec
-p first port
-e last port
IP: list or range

example: mpscan -p 22 192.168.1.1 - 192.168.1.10
mpscan -p 53 -e 101 127.0.0.1

mpscan -p 22 192.168.1.1 - 192.168.1.255
ip: 192.168.1.1 22 OK service:ssh protocol:tcp
ip: 192.168.1.5 22 OK service:ssh protocol:tcp
ip: 192.168.1.10 22 OK service:ssh protocol:tcp
mpscan -p 80 127.0.0.1
ip: 127.0.0.1 80 OK service:www protocol:tcp
mpscan -v -p 137 -e 139 127.0.0.1
ip: 127.0.0.1 137 FAIL service:netbios-ns protocol:tcp
ip: 127.0.0.1 139 FAIL service:netbios-ssn protocol:tcp
ip: 127.0.0.1 138 FAIL service:netbios-dgm protocol:tcp
<<less
Download (0.014MB)
Added: 2006-07-01 License: GPL (GNU General Public License) Price:
1212 downloads
dhcpcd 1.3

dhcpcd 1.3


dhcpcd is an RFC2131-, RFC2132-, and RFC1541-compliant DHCP client daemon. more>>
dhcpcd is an RFC2131-, RFC2132-, and RFC1541-compliant DHCP client daemon. dhcpcd gets an IP address and other information from a corresponding DHCP server, configures the network interface automatically, and tries to renew the lease time according to RFC2131 or RFC1541 depending on the command line option. Please see the dhcpcd man page for complete description of command-line options.
dhcpcd-1.3 has been reported to compile and successfully used on Intel, PowerPC, and Alpha-based Linux platforms providing glibc-2.0.5 or later has been installed.
Invoke the client by typing in console dhcpcd. Note you should NOT explicitly put it in the background with the & character - background processing is automatic unless dhcpcd was
compiled with -DDEBUG flag. Dhcpcd will fork into background as soon as it configures the interface. By default, dhcpcd will attach to eth0 unless you explicitly give an interface name on the command line.
The example below demonstrates dhcpcd usage in a case where linux box serves as a router/firewall for the local network 192.168.12.0.
Enhancements:
- Peter Poeml submitted patches to:
- 1. enable support for Token Ring.
- 2. disable second DHCP_DISCOVER message. S.V - added "-S" option to dhcpcd command line to make second DHCP_DISCOVER message optional.
- 3. Make dhcpcd write to the console if syslogd is not running only with "-d" DebugFlag.
<<less
Download (0.14MB)
Added: 2006-06-28 License: GPL (GNU General Public License) Price:
1214 downloads
Icmpenun 1.2

Icmpenun 1.2


Icmpenum sends ICMP traffic to potential targets on a network. more>>
Icmpenum sends ICMP traffic to potential targets on a network.
Introduction:
Host enumeration is the act of determining the IP address of potential targets on a network. This can be done in both layer 2 and layer 3. Icmpenum sends ICMP traffic for such enumeration. The ICMP packets supported are: Echo, Timestamp, Information and Netmask. Furthermore, it supports spoofing and promiscuous listening for reply packets. Icmpenum is great for enumerating networks which allow ICMP traffic.
Installation:
1. Install the latest libpcap (libpcap 0.4, ftp://ftp.ee.lbl.gov/libpcap.tar.Z).
2. Install the latest Libnet (http://www.packetfactory.net/libnet/).
3. Compile icmpenum as follows:
gcc `libnet-config --defines` -o icmpenum icmpenum.c -lnet -lpcap
4. Copy icmpenum to your fave directory and (as root) start enumerating.
Usage:
Running icmpenum -h gives you the following screen:
# ./icmpenum -h
USAGE: ./icmpenum [opts] [-c class C] [-d dev] [-i 1-3] [-s src] [-t sec] hosts
opts are h n p r v
-h this help screen
-n no sending of packets
-p promiscuous receive mode
-r receiving packets only (no
-v verbose
-c class C in x.x.x.0 form
-i icmp type to send/receive, types include the following:
1 echo/echo reply (default)
2 timestamp request/reply
3 info request/reply
-d device to grab local IP or sniff from, default is eth0
-s spoofed source address
-t time in seconds to wait for all replies (default 5)
host(s) are target hosts (ignored if using -c)
Examples:
Here are some example uses of icmpenum to enumerate hosts.
Example 1:
[Host1]# icmpenum 192.168.1.1 192.168.1.2
This will use the default of Echo packets to try and determine if
192.168.1.1 and 192.168.1.2 are up and running.
Example 2:
[Host1]# icmpenum -i 2 -v 192.168.100.100 192.168.100.200
This will enumerate the two hosts using Timestamp packets in
verbose mode.
Example 3:
[Host1]# icmpenum -i 3 -s 10.10.10.10 -p -v 192.168.1.1 192.168.1.2
This will enumerate hosts 192.168.1.1 and 192.168.1.2 using
Information packets with a spoofed address of 10.10.10.10, since our real address is 10.10.10.11 we use the -p option to listen for the replies.
Here are some more advanced uses of icmpenum.
Example 4:
Assuming Host1 is 6.6.6.6 and Host2 is 7.7.7.7, and that the network 1.1.1.0 has potential hosts to enumerate, we use the following two entries to enumerate with Information packets:
[Host2]# icmpenum -r -t 30 -i 3 -c 1.1.1.0
[Host1]# icmpenum -s 7.7.7.7 -i 3 -c 1.1.1.0
Host2 starts first in receive mode with a timeout of 30 seconds and starts listening for Information packets from the 1.1.1.0 network. Then Host1 starts sending spoofed packets with Host2 as the source address, sending exactly what Host2 is listening for. It should be noted that this is hardly stealthy, as logs at 1.1.1s site could have 7.7.7.7s address all over them, but the -r function is good for testing.
Example 5:
Assuming Host1 is 6.6.6.6 and Host2 is 7.7.7.7, and that Host2 can sniff traffic between 1.1.1.0 and 2.2.2.0, we use the following entries to enumerate the 1.1.1.0 network:
[Host2]# icmpenum -t 20 -n -p -i 2 -c 1.1.1.0
[Host1]# icmpenum -s 2.2.2.2 -i 2 -c 1.1.1.0
Host2 starts first with a timeout of 20 seconds, makes sure not to send the packets with the -n option, listens promiscuously for Timestamp packets from the 1.1.1.0 network. Host1 sends the exact packets Host2 is listening for with a 2.2.2.2 spoofed source address. Yes, one could simply replace the -n option in Host2s command line with -s 2.2.2.2 and do the same thing from one workstation, but were demonstrating a distributed concept.
Enhancements:
- I have added ICMP MASK (type 17 and 18) requests and replys. Simply use the -i 4 option on the command line, such as; icmpenum -i 4 -c 1.2.3.1 (sends ICMP MASK requests to the Class C range 1.2.3.1/24 and reports any system as.
- Due to the use of some older versions of Libnet and Libpcap. I can see problems for some people compiling this and hence have placed two statically linked versions within the tarball
<<less
Download (0.58MB)
Added: 2007-04-05 License: GPL (GNU General Public License) Price:
556 downloads
qmail-rblchk 2.4.1

qmail-rblchk 2.4.1


qmail-rblchk filter all incoming mail and check if it comes from RBL listed IPs. more>>
qmail-rblchk filter all incoming mail and check if it comes from RBL listed IPs.
It is for use in .qmail to check the IP address from the Received lines. qmail-rblchk has the same function as rblsmtpd, but the messages are checked at local delivery time.
Compile it with:
tar -xfz qmail-rblchk-[version].tar.gz
cd qmail-rblchk
make setup check
Edit conf-* files to set compile and install options. If you use FreeBSD you can install qmail-rblchk with his port:
cd /usr/ports/mail/qmail-rblchk
make install clean
Use
|qmail-rblchk [options] [/dir/]
qmail-rblchk is for use in .qmail to check the IP address from the Received: from lines. It has the same function as rblsmtpd, but the messages are checked at local delivery time, with this you can check the content of the message simply redirecting it to another mailbox or address.
If a directory is given with dir all spam message are delivered to that directory if it exist and is in Maildir format.
Directory name must start with a / or . (dot) and end with a /.
General options:
-h: show a sort program description;
-s: add "X-Spam" header into the incoming mail (work only with delivery in dir/);
-i NUM: ignore first NUM IPs found in the header;
-x IP: do not check IP, try to find other address in header (you can ignore max 16 IPs);
-m: check all IPs that find in mail header (default check only the first);
-v: debug mode, make output more verbose;
-p: dont check private IP classes:
127.0.0.0 - 127.255.255.255
10.0.0.0 - 10.255.255.255
172.16.0.0 - 172.31.255.255
192.168.0.0 - 192.168.255.255
-q: quiet mode;
-l LOG: redirect to file LOG program messages;
-L DATA: write blocked IP address tu file DATA (you can use the DATA file to build your RBL list, see example below);
-c: turn on the condredirect compatibility mode for exit code.
Control options
-r addr: request if a TXT record exist into addr;
-R addr: request if a TXT record not exist into addr;
-a addr: request if a A record not exist into addr;
-A addr: request if a A record exist into addr;
-C addr: request if a A or TXT record exist into addr, if true the mail is not SPAM and the program exit;
-X cdb: check if the sender IP is listed in cdb file, see tcprules or EXAMPLES section for the format
Its possible to use up to 32 control options to specify more RBL server; those are checked until the first of them answere true and the mail will be tagged as a "spam" (unless you use -C option).
If a mail come from a.b.c.d IP, the request that the program send to DNS server is: d.c.b.a.addr where addr is the parameter that come after -r, -R, -a or -A options.
Enhancements:
- This release adds many new features: CDB RBL checking, a better IP search method, better logging, and more.
<<less
Download (0.002MB)
Added: 2006-02-21 License: BSD License Price:
1343 downloads
ipset 2.2.8

ipset 2.2.8


IP sets are a framework inside the Linux 2.4.x and 2.6.x kernel, which can be administered by the ipset utility. more>>
ipset pakcage is a framework inside the Linux 2.4.x and 2.6.x kernel, which can be administered by the ipset utility.
Depending on the type, currently an IP set may store IP addresses, (TCP/UDP) port numbers or IP addresses with MAC addresses in a way, which ensures lightning speed when matching an entry against a set.
If you want to:
store multiple IP addresses or port numbers and match against the collection by iptables at one swoop
dynamically update iptables rules against IP addresses or ports without performance penalty
express complex IP address and ports based rulesets with one single iptables rule and benefit from the speed of IP sets
then ipset may be the proper tool for you.
Main features:
ipmap
- The ipmap set type uses a memory range, where each bit represents one IP address and can store up to 65535 (B-class network) entries. You can store same size network addresses in an ipset as well and an IP address will be in the set if the network address it belongs to can be found in the set.
macipmap
- The macipmap set type uses a memory range, where each 8 bytes represents one IP and a MAC addresses. A macipmap set type can store up to 65535 (B-class network) IP addresses with MAC.
portmap
- The portmap set type uses a memory range, where each bit represents one port. A portmap type of set can store up to 65535 ports.
iphash
- The iphash set type uses a hash to store IP addresses where clashing is resolved by double-hashing and, as a last resort, by dynamically growing the hash. Same size network addresses can be stored in an iphash as well.
nethash
- The nethash set type also uses a hash to store CIDR netblocks, which may be of different sizes. The same techique is used to avoid clashes as at the iphash set type.
iptree
- The iptree set type uses a tree to store IP addresses, optionally with timeout values.
Bindings
IP sets allows you to bind an entry in a set to another set, which forms a relationship between the set element and the set it is bound to. The sets may have a default binding, which is valid for every set element for which there is no binding defined at all.
The bindings have no special meaning at the set level. However, you can benefit from them when using the set match of iptables. The set match will follow the bindings and will return a true (matched) value only if the packet parameters match all bindings it found.
Lets see an example:
# ipmap set storing the IP addresses of two machines
ipset -N servers ipmap --network 192.168.0.0/16
ipset -A servers 192.168.0.1
ipset -A servers 192.168.0.2
# portmap set storing the allowed ports for 192.168.0.2
ipset -N ports portmap --from 1 --to 1024
ipset -A ports 21
ipset -A ports 22
ipset -A ports 25
# Binding, which attaches ports to 192.168.0.2
ipset -B servers 192.168.0.2 -b ports
# iptables rule using the set match
...
iptables -A FORWARD -m set --set servers dst,dst -j ACCEPT
iptables -A FORWARD -j DROP
Now according to the iptables rules, sets and binding, the firewall will allow trough packets destined to any port on 192.168.0.1, while for 192.168.0.2 only the ports 21, 22 and 25 will be reachable.
<<less
Download (0.026MB)
Added: 2006-02-09 License: GPL (GNU General Public License) Price:
1355 downloads
PhpWatchDog 1.16.7

PhpWatchDog 1.16.7


PhpWatchDog is a network monitor application which provides a simple way to check if a service is running or not. more>>
PhpWatchDog is a network monitor application which provides a simple way to check if a service (HTTP, FTP, SSH, etc.) is running or not. PhpWatchDog project can send email to the servers administrator to report malfunctions.
This little script is running into my servers from some time (even from two years!). Its very usefull to alert a system administrators team by email. Its a PHP script, so you can setup a cronjob that run the URL of phpwatchdogs installation when you want (I suggest every hour).
Main features:
- check if service is UP or DOWN
- no need to install anything into monitored servers
- report to one email address if service is DOWN
- simple and light
- easy to install and configure
- can set the timeout for probing the service status
- can use fsockopen (PHP) or IO::Socket (PERL) - if for any reasons the fsockopen can operate correctly
- can monitor n servers with a single instance
- can alert a custom email address per server
- to work properly need only APACHE+PHP, no databases or various plugins
- collect each downtime event into a plain text file
Installation:
unpack the downloaded archive
# tar jxvf phpwatchdog-*.tar.bz2
enter into phpwatchdog/ directory and edit the config file (config.php)
# cd phpwatchdog
# nano config.php
Note: here you can see nano, that is an easy to use text editor, but I strongly encourage to learn to use vim (the enhanced version of vi)
put your servers into config.php
$i++;
$config[Servers][$i][host] = 66.35.250.203;
$config[Servers][$i][server_name] = www.sourceforge.net;
$config[Servers][$i][service][1] = 80;
$config[Servers][$i][service][2] = 443;
Every server configuration block must begin with the line "$i++;"
customize your email account for alert reporting into config.php
fire up your browser and go to phpwatchdog installations path
You can schedule the execution of this script putting a similar command into /etc/cron.hourly/ /usr/bin/php-cgi -q /path/of/phpwatchdog/index.php > /dev/null
or using lynx
lynx -dump http://webhost/path/of/phpwatchdog/index.php > /dev/null 2>&1
or with wget
wget -O /dev/null http://webhost/path/of/phpwatchdog/index.php > /dev/null 2>&1
The directory tools contains some usefull scripts:
chk_socket2.pl - its a Perl script used to check the service status if PHP mode is disabled
generate.sh - its a bash script used to generate (with the help of generate.awk) a configuration block from nmap output
sh generate.sh
Usage:
generate.sh IPADDR SERVERNAME
eg:
generate.sh 192.168.0.1 MailServer.com
<<less
Download (0.023MB)
Added: 2005-12-19 License: GPL (GNU General Public License) Price:
1405 downloads
ROVM 0.1.35a

ROVM 0.1.35a


ROVM is a virtual machine to read/write/execute remote objects. more>>
ROVM project is a virtual machine to read/execute/write remote objects. ROVM consists of various packages.
ROVM Server and ROVM Interface supports features to connect each other, and ROVM Client support features to debug your opcodes easily.
We want to do programming like below,
import weongyo@192.168.58.129:/testsuite/ABCDEF
class OPS
{
int add (int b, int x)
{
ABCDEF a = ABCDEF ();
return a.add (b, x);
}
}
O = OPS ();
t = O.add (3, 4);
Its a purpose of ROVM to support these things.
Main features:
- A Library or Extension Module which written for ROVM can be used for every computer language.
Enhancements:
- ROVM Server now uses OpenSSL for encrypted communications by default.
- It is necessary to upgrade your ROVM Interface and ROVM Client.
- User authentication is now supported using Apaches htpasswd utility.
- An option file is now also supported.
<<less
Download (2.4MB)
Added: 2006-03-21 License: GPL (GNU General Public License) Price:
1312 downloads
grepcidr 1.3

grepcidr 1.3


grepcidr can filter IP addresses matching IPv4 CIDR/network specification. more>>
grepcidr can filter IP addresses matching IPv4 CIDR/network specification.
grepcidr can be used to filter a list of IP addresses against one or more Classless Inter-Domain Routing (CIDR) specifications, or arbitrary networks specified by an address range.
As with grep, there are options to invert matching and load patterns from a file. grepcidr is capable of comparing thousands or even millions of IPs to networks with little memory usage and in reasonable computation time.
grepcidr has endless uses in network software, including: mail filtering and processing, network security, log analysis, and many custom applications.
COMMAND USAGE
grepcidr [-V] [-c] [-v] PATTERN [FILE]
grepcidr [-V] [-c] [-v] [-e PATTERN | -f FILE] [FILE]
-V Show software version
-c Display count of the matching lines, instead of showing the lines
-v Invert the sense of matching, to select non-matching IP addresses
-e Specify pattern(s) on command-line
-f Obtain CIDR and range pattern(s) from file
PATTERN specified on the command line may contain multiple patterns
separated by whitespace or commas. For long lists of network patterns,
specify a -f FILE to load where each line contains one pattern. Comment
lines starting with # are ignored, as are any lines that dont parse.
Each pattern, whether on the command line or inside a file, may be:
CIDR format a.b.c.d/xx
IP range a.b.c.d-e.f.g.h
Single IP a.b.c.d
EXAMPLES
grepcidr -f ournetworks blocklist > abuse.log
Find our customers that show up in blocklists
grepcidr 127.0.0.0/8 iplog
Searches for any localnet IP addresses inside the iplog file
grepcidr "192.168.0.1-192.168.10.13" iplog
Searches for IPs matching indicated range in the iplog file
script | grepcidr -vf whitelist > blacklist
Create a blacklist, with whitelisted networks removed (inverse)
grepcidr -f list1 list2
Cross-reference two lists, outputs IPs common to both lists
Enhancements:
- Much faster than past versions due to binary search of patterns
- Decreased memory usage
- Applied search improvements suggested by Dick Wesseling
- Now supports IP ranges as well as CIDR format
- Improved usage to be more grep-like (e.g. filename on command line)
- Now uses grep-like exit code (0=ok, 1=no match, 2=error)
<<less
Download (0.021MB)
Added: 2006-03-21 License: GPL (GNU General Public License) Price:
1313 downloads
Secleted [ 0 ] software to compare
  • Page: 1 of 5
  • 1
  • 2
  • 3
  • 4
  • 5