Scanlogd is a secure system daemon that logs all portscans of a host to the syslog.
The scanlogd project is a system daemon that aims to securely log all portscans of a host to the syslog. The latest release of scanlogd introduces support for one of several packet capture interfaces, including the raw socket interface on Linux and the awareness of libnids and libpcap.
Although the use of libpcap alone is not recommended, it is still available as an option alongside libnids, which is specifically suited for monitoring the traffic of an entire network at once and handling fragmented IP packets on systems other than Linux.
For successful implementation, the following requirements are necessary: libnids, libpcap, and libnet.
The latest release includes an update to the source code. sysconf(_SC_CLK_TCK) has replaced CLK_TCK when _SC_CLK_TCK is known to be available or CLK_TCK is not, which is needed for glibc 2.3.90+.
Although the use of libpcap alone is not recommended, it is still available as an option alongside libnids, which is specifically suited for monitoring the traffic of an entire network at once and handling fragmented IP packets on systems other than Linux.
For successful implementation, the following requirements are necessary: libnids, libpcap, and libnet.
The latest release includes an update to the source code. sysconf(_SC_CLK_TCK) has replaced CLK_TCK when _SC_CLK_TCK is known to be available or CLK_TCK is not, which is needed for glibc 2.3.90+.
What's New
Version 2.2.6: N/A