LaBrea::Tarpit is an enhanced reporting module that generates web pages showing the activity of worm and trojan attacks agains your netblock. It uses Tom Liston's "LaBrea" daemon as a front end to provide data for the reports.
New Features * paginated reporting, much nicer than the BIG long page *stubs for yet to be announced tracking of ICMP and UDP scans w/ DShield reporting * remote daemon operation -- daemon will run on remote host and can be interrogated to retrieve data for web-scripts. See my demo sites at: http://scans.bizsystems.net/ -- runs on the local host http://probes.bizsystems.net/ -- is in another city, different primary network supplier. Both web sites are hosted on the same web server and report in real time. other interesting stuff added in recent releases: dshield reporting -- mail_dshield.pl reports new attacks to dshield.org old bad guy reports -- tell_me.pl lets you know when an attacking host has been your tarpit for a predetermined length of time other sites reports -- web_scan.pl shows a summary of the activity of other sites running LaBrea::Tarpit Grab the new release from the download site, there is a button on the demo site to reach it. If anyone has a good idea what category all this should be classified under, I'll submit it to CPAN. enjoy, Michael