Edward Fjellskål

passivedns. A network sniffer that logs all DNS server replies for use in a passive DNS setup

prads. Passive Real-time Asset Detection System

echidna. Network Security Monitoring Framework

cxtracker. Connection Tracker is a passive network connection tracker for profiling, history, auditing and network discovery.

activedns. An active domain name query tool to help keep track of domain name movements...

pads. This is a fork of the last pads version (1.2) from Matt Shelton with the sguil patches and other patches to make it work on modern operating systems.

fpcgui. Full Packet Capture GUI

snort_preprocessor_dssl. A preprocessor for Decrypting SSL traffic in Snort

polman. The Advanced Policy-Manager for IPS/IDS Sensors

sidrule. sidrule is a simple bash-script to manage Snort/Emerging Threats/Suricata rules based on its sid

nftracker. Network File Tracker (NFT)

sidfarmer. GUI administration for Snort/Suricata IDS/IPS engines

dote. Defender Of The Ethernet

cerdo. Cerdo - TUI to handle Snort/Suricata/VRT/ET rules and sensors

passivednsgo. PassiveDNS in Go!

sguil-tools. My personal collection of some sguil tools that can be shared with the public...

ffss. A Framework For Sid Sharing

prads-perl-version. We made a POC in perl, but consentrating on the C version. Here for historical reasons and to easy test out new ideas.

gamelinux.github.com. World Wide Web

pkg-fpcgui. Debian build repo for FPCGUI

alcanfw. A Linux Client Application+Netfilter FireWall

passivednsrust. PassiveDNS in Rust!

cxtracker-perl-version. I made the POC in perl, but consentrating on the C version. Here for historical reasons.

echidna-refresh. Architectural PoC for Echidna framework.