Detecting suspicious network traffic with psad
Have you ever wondered how many people are scanning your server looking for weaknesses?
One way to find out is to install the Port Scan Attack Detector (psad), is a collection of three lightweight system daemons that alert you to suspicious network activity by analyzing iptables log files.
By Paul Virijevich at NewsForge.
[ Read more ]