Category Archives: Linux

Basically, tcptrack is a sniffer which will show the information about TCP connections on a specific interface. tcptrack will watch all the connections that occur and show the information in a nice interface. Although it’s on a text user interface … Continue reading →

__________________________________________________________ The following a set of “Best Practices” for an Internet Webserver, based on my own experience and advisory J-042 from the U.S. Department of Energy Computer Incident Advisory Capability (CIAC) __________________________________________________________ PROBLEM: Public web servers continue to be attractive … Continue reading →

There are two good methods to see what ports are open in Linux you can use nmap which is a port scanner and you can use netstat. nmap can be used to scan your machine to see whats ports are … Continue reading →

ClamAV ClamAV es un conjunto de herramientas antivirus para UNIX con licencia GPL (software libre). Clamscan Adicionalmente el programa clamscan, desde la línea de comandos puede detectar virus en nuestros archivos. Te conectas a Espora.org vía SecureShell ~$ ssh usuario@espora.org … Continue reading →

Examples (0) Scan a single file: clamscan file (1) Scan a current working directory: clamscan (2) Scan all files (and subdirectories) in /home: clamscan -r /home (3) Load database from a file and limit disk usage to 50 MB: clamscan … Continue reading →

OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS). It has a powerful correlation and analysis engine, integrating log analysis, file integrity checking, Windows registry monitoring, centralized policy enforcement, rootkit detection, real-time alerting and active response. http://www.ossec.net/

We did it, I kept the Untangle logo but add our own logo next to it. Hold down control and shift and click on the “setup info” tab under config. This brings up the “secret” panel for rebranding – you … Continue reading →

ethernet eth0 { disable: false discard: false description: “Config Interface” hw-id: 00:0C:6E:8E:00:00 duplex: “auto” speed: “auto” address 192.168.1.1 { prefix-length: 24 disable: false } } ethernet eth1 { disable: false discard: false description: “” hw-id: 00:00:E8:70:00:00 duplex: “auto” speed: “auto” … Continue reading →

nmap -T Aggressive -A -v Tags: nmap