[Savannah-hackers] submission of cinderella - savannah.nongnu.org

[a . krennmair]

A package was submitted to savannah.nongnu.org
This mail was sent to address@hidden, address@hidden


Andreas Krennmair <address@hidden> described the package as follows:
License: gpl
Other License: 
Package: cinderella
System name: cinderella
Type: non-GNU

Description:
cinderella is a prototype for a so-called \"specification based\" network 
intrusion detection system. It features new concepts not found in other network 
intrusion detection systems.

It works by sniffing the network traffic, rebuilding TCP connections from it, 
and then checking the traffic whether the connections are allowed (based on 
regular-expression-based rules) and if so, whether the traffic is correct 
according to common rules (such as protocol specifications) or behavior of 
network servers and clients.

cinderella is so far unreleased, but a preview version can be downloaded from 
http://synflood.at/cinderella/tmp/cinderella.tgz


Other Software Required:
Ruby, libpcap-ruby

Other Comments: