Free detection software for linux

devialog project is a syslog anomaly detection.
Main features:
- Is a behavior/anomaly/signature-based syslog intrusion detection system
- Detects new unknown attacks via anomalies in syslog
- Fits comfortably in heterogeneous Unix/Linux/*BSD environments at the core of a central syslog server
- Generates its own signatures
- Can email anomalies with included generated signatures in to administrators to ignore future similar events
Present log-based IDS:
Nearly all present log-based intrusion detection systems operate using a pre-defined known signature base, usually painstakingly created by hand. They can work well if the creator knows exactly all error and informational messages the software on a system(s) will write to syslog. Most overworked administrators wish there was an easier way to handle system logfiles in a sane, time-saving fashion. Present log-based intrusion detection systems have difficulty in detecting new attacks.
How devialog Differs:
devialog makes syslog parsing far less of a chore than it previously has been. It is functionally the inverse of standard log monitoring software. devialog, by default, reports on what is not know in its signature base, i.e. anomalous. This type of intrusion detection system is considered behavior-based, or anomaly detection. Reporting can be in the form of an email for each anomalous log, or an email for all the logs sent within a pre-defined time window. devialog can also execute commands, or simply write all anomalies to a file for periodical review.
Signature Creation:
For log-based anomaly detection to operate effectively, one must create an extremely large signature base. With an included utility, devialogsig, the signatures are created automatically. Future signature additions are as simple as a cut and paste from the alert email.
Usage: devialog.pl [-OPTIONS [-MORE_OPTIONS]] [--] [PROGRAM_ARG1 ...]
The following single-character options are accepted:
With arguments: -c
Boolean (without arguments): -d -h -v
Enhancements:
- Bug fixes include better handling of lines with some special characters.
- A timing error was fixed within alert generation: sometimes alerts would be sent inadvertently based on the timing of a new log arriving as an alert was sent out in specific high-volume log situations.
- Altered signature generation creates more exact regular expressions.

Aldegonde is a simple and efficient media player based on the powerful GStreamer media framework.
It supports all file formats supported by GStreamer, including Ogg (Theora, Vorbis, Speex, FLAC), ASF (WMV/WMA, ...), AVI (XviD, MJPEG, DivX ...), Quicktime (MPEG-4, Sorensen, ...), MPEG (1, 2, 4) and so on.
It will also play audio-CDs, video-CDs and DVDs. The primary purpose of Aldegonde is to be a simple example application. It includes a very simple, to-the-point Gtk+ video widget for GStreamer, and it also contains code for automatic disc content detection (VCD, DVD, audio-CD).
The whole of Aldegonde is basically a test bed for features in Totem, which is the official GNOME video/media player.
Main features:
- Support for all popular media formats, including Ogg, AVI, ASF, MPEG and Quicktime.
- Automatic disc content detection. Insert an audio-CD, DVD or VCD and Aldegonde will automatically detect disc type and load the appropriate playback backend.
- Automatic size handling
- Metadata loading support
- Full-screen support

PacketFence project provides interior worm mitigation and policy enforcement capabilities.
PacketFence be placed strategically throughout the enterprise to compartmentalize networks that may present a threat to valuable resources: VPN concentrators, client and guest networks, extranet connectivity points, etc.
PacketFence is designed to operate in heterogeneous where users are either unable or unwilling, without assistance, to secure their systems properly.
Main features:
- Open Architecture-Based on unmodified open-source components, PacketFence requires no software to be installed on client systems.
- Registration-Registration/authentication can be enforced before admission to the network is granted. Additionally successul completion of a vulnerability scan and acceptance of an AUP can also be required
- Detection-detection of worms, trojans, etc by behavorial or signature-based means
- Remediation-Context-sensitive information provided to user for self-directed remediation.

Derbrill Tutorials are Free Tutorials For Writing Games and Multimedia Applications in Runtime Revolution with ArcadeEngine.

The tutorials come in a visually appealing e-book format which is both easy to read and use, the range of topics covered includes:

* The basics of Revolution such as: stacks, cards, scripts, messages and timers
* How to use geometric properties such as distances, angles and intersection rectangles
* Understanding and using different movements including linear, polygonal, circular and elliptic
* Advanced use of images
* Using the built-in collision detection