< February 2006 >
    1 2 3 4
5 6 7 8 91011

Projects @ Mindrot.org

Projects and quick hacks that (to some extent) live here include:

Portable OpenSSH
The port of OpenBSD's SSH protocol implementation to other POSIX operating systems (including most Unices and Windows via Cygwin).
A small, fast, secure and featureful NetFlow™ collector daemon. [moved to Google Code]
Cisco NetFlow™ datagram export for OpenBSD's PF packet filter.
A set of makefiles and scripts for building small, customised OpenBSD distributions suitable for running off read-only boot media (especially flash). Based on OpenBSD's install floppy build system.
This is a software implementation of Cisco's NetFlow™ traffic accounting protocol. It collects and tracks traffic flows by listening on a promiscuous interface. Designed for minimal CPU load on busy networks. [moved to Google Code]
Miscellaneous Code
Various other things developed or patched here, including Python modules:
A suite of network traffic monitoring tools, which can write reports in a number of formats. Largely unmaintained.
OpenBSD-related things
Patches and config snippets related to OpenBSD.
SSH Protocol, Tips and Tricks tutorial
In 2002 I was invited to give a tutorial at the Australian Unix Users Group's Winter conference introducing the SSH protocols, the OpenSSH implementation and demonstrating some of the its fundamental and more advanced uses. The slides and the tutorial notes are distributed here in a number of formats which I occasionally update to keep abrest of continuing development.

Recent updates

Sun, 26 Feb 2006

Using the new Python API in flowd-0.9, it is very easy to write custom processing applications. Here are the results of a couple of hours of figuring out RRDtool's subleties: a small pair of scripts to chart NetFlow data (example results). Details on how to use these scripts are contained in this mailing list post.

The scripts currently summarise traffic by IP protocol, but this approach can be extended to plotting any pretty much any classification of traffic - reports by IP address, or by [IP address + TCP port] are easy to realise too.

posted at: 12:00 | permanent link

flashboot-0.9beta1 is out. This is based on OpenBSD 3.9-beta.

posted at: 12:00 | permanent link