Free probe ministries software for linux

fprobe is a small NetFlow probe which will listen on a network interface. It isusing libpcap, aggregate the traffic and export NetFlow V5 datagram to a remote collector for processing. A flow is identified by ip protocol, source ip, source port, destination ip, destination port.
Right now only ethernet interfaces are supported. Support for more media types (tunnel, ppp etc) will be added in nex versions.
/fprobe -t IP:PORT [ -i interface ] [ -s scan ] [ expression ]
-t IP:PORT NetFlow collector address
-i interface interface to listen for traffic (default eth0)
-s scan interval in seconds between two flow tables scans (Default: 10)
-c file file with MAC definitions
-p dont put the interface in promisc mode
-b go in background (daemon mode)
-l file log file name
expression a bpf expresion to filter traffic (See libpcap/tcpdump)
For example:
./fprobe -i eth2 -t 127.0.0.1:8182
This will sniff the traffic on interface eth2 and will send the NetFlow data to localhost (127.0.0.1) on UDP port 8182.
Internal flow table is parsed every scan seconds for expired flows which are sent to remote collector.
Enhancements:
- can handle IP fragments
- can set the snmp interface ID based on source/destination MAC address
- fixed uptime in exported flows
- new hash function for internal storage
- delay between udp datagrams emited

THC-Probe is the ultimate host scanner compilation for Linux, featuring nmap, snmpscan, netbios auditing tool and super-cool vh shell script.

INSTALL: just run "make install". Everything will be installed in /usr/local

RUN: just run "netprobe" and see the options.

Every host scanned will be saved as a "host.bla.com.probe" file in your current directory.

It does many stuff like snmp guessing, samba pw guessing and information gathering.

Nothing great and big, but it suits my needs.

Pocket Linux is an almost minimal, one floppy linux system designed to quickly convert PC workstation into secure linux-based workstation using ssh to connect to remote host (other networking clients are also supported).
It supports bootp for determining host IP and other network parameters (theres also manual configuration possible, but bootp is recommended).
In addition to workstations equipped with a network card (ethernet or arcnet), you can also use Pocket Linux on a PC equipped with a modem. Modem is automatically detected and then PPP connection is made.
The idea came up some time in 1996 or so. The distribution then was not perfect, but still it shown it was a great idea. It wasnt maintained for about year or so, until I took it up again in the early January 1998. After a complete rebuild Pocket Linux 2.00 was released. It soon gained a huge number of happy users, whose ideas helped its development.
The aim is to provide a small and efficient workstation that autoconfigures as much as possible and lets securely use the network from almost everywhere.
Current version is a nice attempt and future ones will enhance the automation and support for various network equipment and protocols, becoming a total solution. Future plans also include side projects like one floppy router.
In order to understand some of the config options its useful to know something about operations that are done during bootup (in order to automatically configure the network). These are, in order (the later attempts are made if the earlier ones dont set-up the network):
- attempt to setup the network using BOOTP
- attempt to reuse previous manual configuration
- modem detection
- attempt to setup modem conection
Most of the config options switches these operations on and off.
Main menu
You can choose the following network configuration commands from the main menu (only the ones that make sense in the present context are displayed):
- Options - allows setting few binary parameters controlling automatic network configuration and modem handling.
- BOOTP query - attempts to configure network (ethernet or arcnet) using BOOTP. Normally its automatically done during bootup, but this can be switched off.
- Manual configuration - allows manual setting of network configuration parameters (ethernet or arcnet).
- Detect modem - detects serial port the modem is on and its parameters (transfer rate, initialization commands).
- Dial PPP using predefined configuration - creates modem connection (PPP) using one of (up to ten) remembered configurations. By default only TPSA (0202122) configuration is remembered.
- Dial PPP using new configuration - creates new PPP configuration and sets up a modem connection using the newly created config.
- Disconnect PPP - disconnects modem connection.
- Mount /usr via NFS - mounts remote /usr filesystem via NFS. It will be automatically mounted during each Pocket Linux bootup if its turned on in configuration options.
- Exit - Do not config the network - exits the program without configuring the network.
Configuration options
There are following options available:
- Probe network with BOOTP - switches automatic BOOTP probing during bootup on and off. On by default.
- Reuse manual network configs - if on, an attempt is made to restore network configuration during bootup. Netconf remembers 10 most recent manual configurations along with network cards MAC addresses. If cards MAC address matches one of the remembered ones, assigned configuration is used. On by default.
- Automatically setup PPP - switches automatic attempt to create modem connection during bootup on and off. Its made with the first config on PPP configs list. On by default.
- Reuse modem configuration - if on, modem detection is not performed during bootup - instead most recently used modem configuration is used. Off by default.
- Pulse dialing - switches dialing mode used for modem connections between tone dialing (DTMF) and pulse dialing. Default is off (that is tone dialing).
- Automount disk partitions - switches on and off automatical disk partitions mounting (ext2 and vfat filesystems) and swap partition activation during bootup. On by default.
- Add swap file if low memory - switches on and off automatical swap file creation during bootup. Swap file is created if, and only if, theres less than 16 MB memory available (including potentially activated swap partitions) and theres a disk partition on which it could be created available. On by default.
- Automount NFS /usr - switches on and off /usr filestem mounting via NFS during bootup. NFS path to the filestem must be set using "Mount /usr filesystem via NFS" command in main menu. Off by default.
Manual network card configuration
You can enter network configuration parameters in this window:
- This machines IP - enter IP number for this computer here
- Network mask - enter netmask here. If omitted, mask will be calculated based on IP (which will not necessarily be right).
- Broadcast address - enter network broadcast address here. If omitted broadcast address will be calculated based on IP (not mask! - which will not necessarily be right).
- Default gateway - enter IP address of default network gateway (router) here.
- Nameserver IP(s) - enter one or more (separated by spaces) name servers IP addresses here. Can be omitted, but then domain names couldnt be used.
- Default domain(s) - you can enter one or more (separated by spaces) domain names to search host if incomplete domain names will be used. Its optional.
PPP configuration
You can enter modem connection configuration parameters in this window:
- Config name - config name (used in existing configuration selection menu).
- Phone number - phone number to dial (eg. 0w202122 for TPSA access modems).
- Username - username to send to remote server
- Password - password to send to remote server
- Nameserver IP(s) - enter one or more (separated by spaces) name servers IP addresses here. Can be omitted, but then domain names couldnt be used.
- Default domain(s) - you can enter one or more (separated by spaces) domain names to search host if incomplete domain names will be used. Its optional.
Because of permanent configuration that is kept on the floppy you should remember to:
- dont write protect the floppy
- dont remove the floppy from the drive (at least during network configuration)
Enhancements:
- bugfixes in netconf reuse code
- disk partitions automounting, swap partitions autoactivating
- automatic swap file creation
- extended support for NFS mountable /usr
- PS/2 mouse support
- new startup logo

MRTG-eth-probe provides a probe for the Multi Router Traffic Grapher, generating statistics for network devices that do not support the SNMP protocol. It reads interface stats from /proc/net/dev (or some other file you configure), and generates an output readable for MRTG by parsing the file.
Since the starting of this project MRTG-eth-probe has been downloaded more than 1700 times (as of 2001-11-04). Thanks for this go first of all to Freshmeat for accepting the project and for redirecting so much people to my sourceforge projectpage Additional thanks go to Michael Feger for sending me a patch to 1.5.2 which makes up the most important changes of this release.
Enhancements:
- bugfix: missing dot

mrtg-mica-probe is a Telebit MicaBlazer modem usage probe.
mrtg-mica-probe is a modem usage probe for the ITK NetBlazer 6100 (formerly Telebit MicaBlazer) 3.32. It is used to monitor the number of used modem and ISDN lines.
The latest release of mrtg-mica-probe can always be found on the web at http://pwo.de/projects/mrtg/ or via anonymous ftp at ftp://ftp.pwo.de/pub/pwo/mrtg/mrtg-mica-probe/.
mrtg.cfg-mica shows some sample mrtg.cfg entries.
Enhancements:
- added documentation to workaround a Telebit bug that might prevent SNMP from starting correctly.

mrtg-misc-probe probes different system features for mrtg to graph.
Currently it can probe:
- percent usage of disk space and inodes for UFS filesystems
- percent usage of disk space for VxFS filesystems
- incoming and outgoing mail messages on sendmail mail server
- total size of mail messages sendt and received on sendmail mail server
- network delay using NTP peers/servers
- number of ClearCase vobs and views
- number of available and used ClearCase and MultiSite licenses
- number of active and disconnected sessions of a Citrix Metaframe server
- number of reachable hosts in a given network range
- network device reachability (ping success)
Enhancements:
- New probes: ctxmf - number of active and disconnected Citrix Metaframe sessions; hostcount - scan given nmap-network-range and return number of hosts found.

pam_shield is a PAM module that uses iptables to lock out script kiddies that probe your computer for open logins and/or easy guessable passwords. The project is meant as an aid to protect public computers on the open internet.

Everybody knows it is unwise to leave computers largely unprotected connected to the internet. However, there are cases in which this is still common practice. For exampe, academic sites with hundreds of users often have a policy of allowing logins from over the world. They are under constant attack by "kiddies" trying to break in to the system by password guessing. pam_shield aims to detect and block these "kiddies".

pam_shield was developed by Walter de Jong in 2006 and 2007.

The author cannot be held responsible for any consequences or harm caused by this software.

rlytest project tests a host to determine whether it will relay third-party email. It will try to relay an email message to yourself through that host.
A host that allows third-party relay is subject to attack by Internet vandals, and frequently is hijacked by spammers to relay massive amounts of junk email. A host that allows third-party relay should be immediately secured, disconnected, or shunned as a menace to the Internet.
This utility is a perl script. It requires Perl version 5.002 or above plus the IO::Socket module. This module is distributed with the core Perl 5.004 package, and is an add-on option for earlier versions.
Enhancements:
- Minor revisions to the text of the probe email message.