Jump to content
Fi8sVrs

PortDog Network Anomaly Detector

Recommended Posts

  • Active Members
Posted

PortDog is a network anomaly detector aimed to detect port scanning techniques. It is entirely written in python and has easy-to-use interface. It was tested on Ubuntu 15. Please note that, it is not working on Windows OS due to suffering from capturing RAW packets.I am working on to write this script to work both platforms. In future , I'm thinking about adding firewall options that could block malicious attempts. It is using Raw packets for analysis. For this reason, please ensure that you have run this script from privileged session.

36458b3536c5.jpg

555d29bbf346.jpg

b933525686ed.jpg

Usage:

sudo python portdog.py -t time_for_sniff_in_minutes

For example, if you want to detect for 5 minutes use:

sudo python portdog.py -t 5

For infinite detection use:

sudo python portdog.py -t 0

If you want to get list of scanned ports , press CTRL+C to get port list at runtime (If scan was happened).

You can share it or use it in your own scripts!

Please test it as much as possible , and give me feedback!

Thank u!

//Azerbaijanian WhiteHats

wget http://packetstorm.wowhacker.com/sniffers/PortDog-master.zip 

Source https://packetstormsecurity.com/files/132971/PortDog-Network-Anomaly-Detector.html

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...