[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#390408: ITP: hlbr -- An IPS that runs over layer 2 (no TCP/IP stack required)



Package: wnpp
Severity: wishlist
Owner: Andre Bertelli Araujo <andre@bertelli.name>


* Package name    : hlbr
 Version         : 1.1
 Upstream Author : Andre Bertelli Araujo <andre@bertelli.name>, Joao
Eriberto Mota Filho <eriberto@eriberto.pro.br>
* URL             : http://hlbr.sourceforge.net/
* License         : GPL
 Programming Lang: C
 Description     : An IPS that runs over layer 2 (no TCP/IP stack required)

HLBR stands for Hogwash Light BR. It is a brazilian fork of
Jason Larsen's Hogwash IPS. Its main feature is that it can run
directly over OSI model layer 2, which means it doesn't even requires a
TCP/IP stack, running as a bridge. HLBR comes with a set of rules to
detect known malicious network traffic, and you can define your own rules
as well. Packet handling include options like dropping or diverting it to
another machine (such as a honeypot). Since it works like a bridge and
doesn't requires an IP address, it is invisible to intruders.

-- System Information:
Debian Release: testing/unstable
 APT prefers testing
 APT policy: (990, 'testing'), (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.16-2-k7
Locale: LANG=pt_BR.UTF-8, LC_CTYPE=pt_BR.UTF-8 (charmap=UTF-8)



Reply to: