libnids

TCP port scan detection tool

Libnids is an implementation of an E-component of Network Intrusion Detection System. It emulates the IP stack of Linux 2.0.x. Libnids offers IP defragmentation, TCP stream assembly and TCP port scan detection.

It is a platform to use multiprocess to combine dpdk and libnids together to support analyse packets in 10G port.

The Libnids parallelized on commercial multi-core systems

SimpleNids is a simple network traffic detection system based on libnids. Can effectively detect network packets, including: IP packets, IP fragment packets, UDP packets, TCP packets, HTTP packets It can read data packets from specified network card devices or specified pcap for analysis, and the parsing result is JSON.

First try on DPDK with libnids

对局域网内用户对互联网的访问进行监控，利用libnids抓取http数据包，并对数据包进行解析还原，与设置好的匹配规则进行匹配，如果ip或者url命中，则进行封堵，结果是用户无法访问该网页，并生成封堵日志；如果解析出的http数据包的内容命中关键字规则，则对命中的关键字进行记录，并生成监测日志。

A minimal IPS - Uses Python, libnids, re and some foo magic :)

A parallel TCP/IP stack for middlebox, based on libnids, with a Implementation of DHash

This is to parallelize the libnids on a multi-core computer.

libnids_modify

a network intrusion detection system based on Libnids and QT 4.7, needs improving

哈尔滨工程大学 网络空间信息安全审计系统设计与实现 使用cgo调用libnids

a detector detects pdf data in network stream got by libnids frame

DDOS packet logger using libnids, libgeoip and liblzfx and the associated tools to analyze those logfiles in plaintext.

grab stream feature with libnids

Protocol analysis and restoration by libnids

import from http://libnids.sourceforge.net/

A windows port of libnids

The littlest network watcher - libnids example

Using libnids to capture http/https traffic Libnids实现抓包HTTP

The Perl module Net::LibNIDS

Implementation of E-component of Network Intrusion Detection System

No description available

根据需要修改了libnids

libnids

libnids for leanning

Win32 port of libnids

libnids-1.21_patched