Free system local audit daemon software for linux

SLAD is a tool for performing local security checks against GNU/Linux systems.

SLAD has been primarily developed for the BOSS project to work together with Nessus to enhance its local scanning capabilities. For example, scanning for weak passwords with a tool like John-the-Ripper is something that simply cannot be achieved by a network scan.

Therefore, SLAD is required to be installed on every GNU/Linux system where local auditing needs to be done. SLAD can then be used as a stand-alone application or more conveniently through Nessus. For usage with Nessus two NASL plugins are provided for interfacing between Nessus and SLAD

The Version 2.0 provides a XML Interface for Parameters and easy integration of additional audit-parameters and tools. To help the administrator to integrate a new feature-set, a development-documentation is provided with the cvs.

SLAD has been tested and verified on the following platforms:

RedHat Fedora Core 3
SuSe 9.2
Debian 3.0 (woody)
Debian 3.1 (sarge)
ERPOSS3
Gentoo Linux 2004.3

SLAD is implemented in Perl and provides an extendable plugin architecture allowing to use various GPL-based security scanners and auditing tools under one common framework. Currently, SLAD comes packaged with

John-the-Ripper
Chkrootkit
LSOF
ClamAV
Tripwire
TIGER

As a result SLAD delivers reports of these locally installed auditing and analysis tools. When used with Nessus the individual reports are wrapped into a standard Nessus report.

SLAD as well as the SLAD NASL Plugins can be downloaded from this Website in their current stable release V2.0.

Installation:

You can use our "easy-to-use" GTK installer, this installer downloads the lastest SLAD Release Binary, and install it on the target system. You only need to provide the login for the traget system.

Virtual Administrator Daemon is set of Perl scripts and modules which can help with remote server management. It uses XML input/otput, and can be run by (x)inetd.
It can receive multiple commands to execute, and it has been built to provide support for a scalable system administration environment.
Since it takes XML, clients can be developed in a different set of environments with easy integration into the server.
Enhancements:
- This release added support for standalone/daemon mode, SSL support and a default SSL certificate, a default timeout of 30 seconds while reading or writing sockets, more refined log messages, and new < mode >< /mode >, < ip >< /ip >, < port >< /port >, and < listen >< /listen > configuration elements.

MiniUPnP Client and Daemon is an UPnP IGD client lightweight library and UPnP IGD daemon.
The UPnP protocol is supported by most home adsl/cable routers and Windows 2K/XP. The aim of the MiniUpnp project is to bring a free software solution to support the "Internet Gateway Device" part of the protocol.
The Linux SDK for UPnP devices (libupnp) seems too heavy for me. I want the simplest library possible, with the smallest footprint and no dependencies to other libraries such as XML parsers or HTTP implementations. All the code is pure ANSI C.
Compiled on a x86 PC, the miniupnp client library have less than 15KB code size. For instance, the upnpc sample program is around 20KB.
The project is divided in two main parts : the client library, enabling applications to access the services provided by an UPnP "Internet Gateway Device" present on the network, and the miniupnpd daemon, providing these services to your network from a linux or bsd box being the gateway. At the moment the miniupnpd is developped on OpenBSD 3.0+ with pf. You can see some of the work I have done to integrate with pf on this page.
As pf is also available under FreeBSD, guys at the pfSense project have ported miniupnpd to this system.
For some reasons, it may be not the good solution for you to use the code from the MiniUPnP project directly.
As the code is small and simple to understand, it is a good base to take inspiration for your own UPnP implementation. The KTorrent team UPnP plugin in C++ is a good example.
If you are wondering which home router is working with the miniupnp client, you can find the answer here. In fact, you are more likely to help me fill the list by sending me an email.
Usefulness of the miniUPnP client library
The usage of the miniUPnP client library is useful whenever an application needs to listen for incoming connections.
Examples : P2P applications, FTP clients for active mode, IRC (for DCC) or IM applications, network games, any server.
The typical usage of UPnP capabilities of a router is a file tranfert using MSN messenger. The MSN Messenger software uses the UPnP API of Windows XP to open port for incoming connection. To mimic the MS software, it is a good idea to use UPnP as well.
Enhancements:
- This release adds changes to accommodate the Linux 2.6.22 kernel.

Music daemon(musicd) is a music playing server that supports multiple formats through plugins and multiple playlists. Musicd supports plugins to enable playing of different audioformats. The plugin-api is quite similiar to one that the popular XMMS uses. Currently XMMS-plugins are not directly supported, but if I find the time, Ill make a meta-plugin to support them.
The first reason to make the player a server is to make it possible to use many different frontends and even at the same time. You can use a GUI if you like them, but anything it can do, can be done from commandline too.
The second reason is to make sure that the GUI or X does not crash the whole player. I have found that many software with a GUI tend to crash. With musicd the player is unaffected by this and you can start the interface again.
Main features:
- Musicd has its own simple text-based protocol for player-frontend communication.
- Support for unlimited number of playlists, songs per playlist and frontends connect at the same time
- Support for both IPv4 and IPv6. Also UNIX-sockets are supported for local connections.
- Currently supported audioformats: mp3 (ffmpeg), ogg vorbis (vorbisfile) and mods (libmikmod).
- Support for OSS and Solaris ouput.
- Musicd has been tested on x86 Linux and Solaris 9.
Enhancements:
- Calling play while already playing shouldnt cause deadlocks anymore
- Load command on a file that has too long line as the last line locked up the daemon, this shouldnt happen anymore
- Invalid id3tags shouldnt give random data anymore
- Invalid filenames shouldnt crash the player anymore

CPQ Array Daemon project keeps on monitoring your controller and checks for abnormal conditions. By default is only reports to the syslogs, but you can make it send SNMP Traps to selected hosts.

This tool can run on a linux based intel box with a smart array controller from Compaq. It reports status changes in the disks both to the syslog and to a snmp trap host.

The default is to only log to the syslog. You can specify traphosts with the -t parameter at the commandline. Multiple traphosts are allowed. It checks for valid input, but any errors are non-fatal, in fact the traphost is just ignored..

To ensure correct opereration compile it for the same kernel that runs on the machine where you want to use this. At least make sure that the version of the SmartArray driver is the same. Strange things can happen otherwise.

Installation:

The simplest way to compile this package is:

1. `cd to the directory containing the packages source code and type `./configure to configure the package for your system. If youre using `csh on an old version of System V, you might need to type `sh ./configure instead to prevent `csh from trying to execute `configure itself.

Running `configure takes awhile. While running, it prints some messages telling which features it is checking for.

2. Type `make to compile the package.

3. Optionally, type `make check to run any self-tests that come with the package.

4. Type `make install to install the programs and any data files and documentation.

5. You can remove the program binaries and object files from the source code directory by typing `make clean. To also remove the files that `configure created (so you can compile the package for a different kind of computer), type `make distclean. There is also a `make maintainer-clean target, but that is intended mainly for the packages developers. If you use it, you may have to get all sorts of other programs in order to regenerate files that came with the distribution.

Very Simple Control Protocol Daemon is a daemon for home automation tasks.
VSCP protocol is a very simple and free protocol for SOHO automation tasks & friends. The protocol is so easy that everyone can grasp the idea behind it in a few minutes.
Therefore its also very easy to construct and use VSCP aware modules and components. Nodes just start up and then serve the control solution reliable and stable for ever and ever and ever.
The protocol is free and is not designed to conquer the world and every Small Office and HOme. Very Simple Control Protocol Daemon is constructed just because its fun to make tiny little things work together.
Enhancements:
- The port was changed from 1681 to the IANA registered 9598. Scripts for Digitemp support and the first version of the ODIN database were added.

SMBD Audit application is a set of VFS audit module for Samba 3 and web frontend to view and search samba audit logs.

Module stores logs directly into MySQL database with libmysqlclient.

You can search database by Login, Address, Share, Action, Log Message(specify filename or directory name), From and To Date.

Here is a very short list of what SMBD Audit package includes, and what it does.

- a VFS audit module, to provide logging to MySQL database

- a web front end to view and search logs.

No-relay SMTP daemon is a lightweight mail server whose sole purpose is to receive incoming messages and deliver them to local users. Its main "feature" (or non-feature, really) is to be completely unable to relay messages to adjacent servers: if an incoming message is not addressed to a local mailbox, smtpd will reject it.

Another convenient feature is its automatic grey-listing of clients that allows you to efficiently reject spammers based on their behaviour. No-relay SMTP daemon can handle incoming email traffic for an unlimited number of domains (i.e. act as a MX for these domains) without the need for any configuration (other than creation of users mailboxes).