< September 2004 >
SuMoTuWeThFrSa
    1 2 3 4
5 6 7 8 91011
12131415161718
19202122232425
2627282930  

Projects @ Mindrot.org

Projects and quick hacks that (to some extent) live here include:

Portable OpenSSH
The port of OpenBSD's SSH protocol implementation to other POSIX operating systems (including most Unices and Windows via Cygwin).
flowd
A small, fast, secure and featureful NetFlow™ collector daemon. [moved to Google Code]
pfflowd
Cisco NetFlow™ datagram export for OpenBSD's PF packet filter.
flashboot
A set of makefiles and scripts for building small, customised OpenBSD distributions suitable for running off read-only boot media (especially flash). Based on OpenBSD's install floppy build system.
Softflowd
This is a software implementation of Cisco's NetFlow™ traffic accounting protocol. It collects and tracks traffic flows by listening on a promiscuous interface. Designed for minimal CPU load on busy networks. [moved to Google Code]
Miscellaneous Code
Various other things developed or patched here, including Python modules:
Traffic-vis
A suite of network traffic monitoring tools, which can write reports in a number of formats. Largely unmaintained.
OpenBSD-related things
Patches and config snippets related to OpenBSD.
SSH Protocol, Tips and Tricks tutorial
In 2002 I was invited to give a tutorial at the Australian Unix Users Group's Winter conference introducing the SSH protocols, the OpenSSH implementation and demonstrating some of the its fundamental and more advanced uses. The slides and the tutorial notes are distributed here in a number of formats which I occasionally update to keep abrest of continuing development.

Recent updates

Fri, 24 Sep 2004

Flowd 0.6 has been released. This release adds support for NetFlow v.7 (used on some Catalyst switches) and NetFlow v.9. The NetFlow v.9 code includes support for IPv6 flows.

This release also adds a distribution of example tools that use the Perl or Python APIs. Right now, this consists of a tool to perform basic analysis of flow logs to look for worm-like traffic patterns and a utility to insert flow records into an SQL database.

There are no RPMs available just yet, but you can build them yourself from the tarball using rpmbuild -ta flowd-0.6.tar.gz.

posted at: 12:00 | permanent link