Package: wnpp
Version: N/A; reported 2003-03-04
Severity: wishlist

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

* Package name    : earlybird
  Version         : 2.6 (3.0 soon to be released)
  Upstream Author : Jay D. Dyson <[EMAIL PROTECTED]>
* URL             : http://treachery.net/~jdyson/earlybird/
* License         : GPL
  Description     : Realtime HTTP worm intrusion attempt notification tool

Early Bird is a realtime HTTP worm intrusion attempt reporting utility.
Originally written to combat only Code Red, Early Bird originally
functioned simply as a decoy by living under the name of 'default.ida'.
Over time, Early Bird was altered to handle other worm attack
signatures.  When the HTTP worm attempts to exploit a known buffer
overflow (usually in IIS), Early Bird captures the attacking IP, the
request string sent, and composes an email to the offending network
contact to alert them to their problem.

(taken from the earlybird FAQ)

IANADD - but if I ever get some more free time, this would be candidate
for a first package, I think.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: get my key from http://fortytwo.ch/gpg/92082481

iKcEARECAGcFAj5kpfxgGmh0dHA6Ly9mb3J0eXR3by5jaC9sZWdhbC9ncGcvZW1h
aWwuMjAwMjA4MjI/dmVyc2lvbj0xLjMmbWQ1c3VtPTE0Y2E2MTZmMTQ2ODJhODJj
YjljYzI1YzliMzRhMTBkAAoJEIukMYvlp/fWRMkAoIR2qIK/iZB/uKJWTu/w1HJI
/VQ5AJ0Ql2tDzQY9EkDd7k8C49MLRlqRGg==
=wqU4
-----END PGP SIGNATURE-----

Reply via email to