You are viewing a plain text version of this content. The canonical link for it is here.
Posted to modperl@perl.apache.org by Michael Robinton <mi...@bizsystems.com> on 2002/06/05 20:03:27 UTC
[ANNOUNCE] release of LaBrea::Tarpit 1.03
LaBrea::Tarpit is an enhanced reporting module that generates web pages
showing the activity of worm and trojan attacks agains your netblock. It
uses Tom Liston's "LaBrea" daemon as a front end to provide data for the
reports.
New Features
* paginated reporting, much nicer than the BIG long page
*stubs for yet to be announced tracking of ICMP
and UDP scans w/ DShield reporting
* remote daemon operation -- daemon will run on remote host and can
be interrogated to retrieve data for web-scripts. See my demo sites
at:
http://scans.bizsystems.net/ -- runs on the local host
http://probes.bizsystems.net/ -- is in another city,
different primary network supplier. Both web sites are hosted on
the same web server and report in real time.
other interesting stuff added in recent releases:
dshield reporting -- mail_dshield.pl
reports new attacks to dshield.org
old bad guy reports -- tell_me.pl
lets you know when an attacking host has been
your tarpit for a predetermined length of time
other sites reports -- web_scan.pl
shows a summary of the activity of other sites running LaBrea::Tarpit
Grab the new release from the download site, there is a button on the
demo site to reach it.
If anyone has a good idea what category all this should be classified
under, I'll submit it to CPAN.
enjoy,
Michael