Projects @ Mindrot.org
Projects and quick hacks that (to some extent) live here include:
- Portable OpenSSH
- The port of OpenBSD's SSH protocol implementation to other POSIX operating systems (including most Unices and Windows via Cygwin).
- flowd
- A small, fast, secure and featureful NetFlow™ collector daemon. [moved to Google Code]
- pfflowd
- Cisco NetFlow™ datagram export for OpenBSD's PF packet filter.
- flashboot
- A set of makefiles and scripts for building small, customised OpenBSD distributions suitable for running off read-only boot media (especially flash). Based on OpenBSD's install floppy build system.
- Softflowd
- This is a software implementation of Cisco's NetFlow™ traffic accounting protocol. It collects and tracks traffic flows by listening on a promiscuous interface. Designed for minimal CPU load on busy networks. [moved to Google Code]
- Miscellaneous Code
-
Various other things developed or patched here, including Python modules:
- py-radix - Radix tree data structure for Python. [moved to Google Code]
- py-bcrypt and jBCrypt - OpenBSD-style Blowfish password hashing for Pythoni and Java. [moved to Google Code]
- py-editdist - Levenshtein edit distance calculation for Python. [moved to Google Code]
- passwdqc - Password complexity checking plugin for OpenBSD
- Some older junk too...
- Traffic-vis
- A suite of network traffic monitoring tools, which can write reports in a number of formats. Largely unmaintained.
- OpenBSD-related things
- Patches and config snippets related to OpenBSD.
- SSH Protocol, Tips and Tricks tutorial
- In 2002 I was invited to give a tutorial at the Australian Unix Users Group's Winter conference introducing the SSH protocols, the OpenSSH implementation and demonstrating some of the its fundamental and more advanced uses. The slides and the tutorial notes are distributed here in a number of formats which I occasionally update to keep abrest of continuing development.
Recent updates
Sun, 26 Feb 2006
flashboot-0.9beta1 is out. This is based on OpenBSD 3.9-beta.
posted at: 12:00 | permanent link
Using the new Python API in flowd-0.9, it is very easy to write custom
processing applications. Here are the results of a couple of hours of
figuring out
RRDtool's
subleties: a small pair of
scripts
to chart NetFlow data (example
results).
Details on how to use these scripts are contained in this
mailing list post.
The scripts currently summarise traffic by IP protocol, but this approach can
be extended to plotting any pretty much any classification of traffic - reports
by IP address, or by [IP address + TCP port] are easy to realise too.
posted at: 12:00 | permanent link