Projects @ Mindrot.org
Projects and quick hacks that (to some extent) live here include:
- Portable OpenSSH
- The port of OpenBSD's SSH protocol implementation to other POSIX operating systems (including most Unices and Windows via Cygwin).
- flowd
- A small, fast, secure and featureful NetFlow™ collector daemon. [moved to Google Code]
- pfflowd
- Cisco NetFlow™ datagram export for OpenBSD's PF packet filter.
- flashboot
- A set of makefiles and scripts for building small, customised OpenBSD distributions suitable for running off read-only boot media (especially flash). Based on OpenBSD's install floppy build system.
- Softflowd
- This is a software implementation of Cisco's NetFlow™ traffic accounting protocol. It collects and tracks traffic flows by listening on a promiscuous interface. Designed for minimal CPU load on busy networks. [moved to Google Code]
- Miscellaneous Code
-
Various other things developed or patched here, including Python modules:
- py-radix - Radix tree data structure for Python. [moved to Google Code]
- py-bcrypt and jBCrypt - OpenBSD-style Blowfish password hashing for Pythoni and Java. [moved to Google Code]
- py-editdist - Levenshtein edit distance calculation for Python. [moved to Google Code]
- passwdqc - Password complexity checking plugin for OpenBSD
- Some older junk too...
- Traffic-vis
- A suite of network traffic monitoring tools, which can write reports in a number of formats. Largely unmaintained.
- OpenBSD-related things
- Patches and config snippets related to OpenBSD.
- SSH Protocol, Tips and Tricks tutorial
- In 2002 I was invited to give a tutorial at the Australian Unix Users Group's Winter conference introducing the SSH protocols, the OpenSSH implementation and demonstrating some of the its fundamental and more advanced uses. The slides and the tutorial notes are distributed here in a number of formats which I occasionally update to keep abrest of continuing development.
Recent updates
Fri, 27 Aug 2004
I just released a bugfix version of softflowd: 0.9.2. This version fixes a one-line bug that crept in before the last release and prevents flow export from working. If you already have softflowd-0.9.1, you can download the small patch instead of picking up the entire tarball.
posted at: 12:00 | permanent link
softflowd-0.9.1 has been released. This version fixes a few small bugs and adds NetFlow v.5 protocol support.
posted at: 12:00 | permanent link
Thu, 19 Aug 2004
I just released Flowd 0.4.1, which adds portability to Redhat 7.3 (in particular, its Perl-5.6.1).
posted at: 12:00 | permanent link
Tue, 17 Aug 2004
Flowd 0.4 has been released. This release adds portability to Solaris 9 and Redhat 9 and fixes a few bugs found in stress testing. There is now a platform notes file that includes details on each supported platform.
posted at: 12:00 | permanent link
Fri, 13 Aug 2004
Released flowd-0.3. This is a major release, with several significant changes:
- Changed the binary log format to make it more compact, older versions of flowd will not be able to read version 0.3 logs (the format is now frozen for future incompatible changes)
- Implemented runtime reconfiguration on SIGHUP
- Added a Python API (flowd.py) to the flow log format, to complement the existing Perl API
- Created RPM subpackages for the Perl and Python libraries
- Several bugfixes
posted at: 12:00 | permanent link
Tue, 03 Aug 2004
A new release (0.2) of flowd is available. It fixes a couple of bugs and adds a few new features, most notably the ability to perform negated matches in filter expressions (e.g. "accept src ! 10.0.0.0/8") and RPM packaging support. If you want to make an RPM of flowd, you can just "rpmbuild -ta flowd-0.2.tar.gz" the tarball, but you will need the perl-Socket6 package installed. Fortunately, I have made a package of this too.
posted at: 12:00 | permanent link