Saturday, June 28, 2008

DecaffeinatID: small and fast IDS.

HI folks, I discovered this tool during a Windows PC configuration for a man. He wanted use his own PC in coffe bars and in a public places using WiFi technologies. He has worried about security because he known something about wireless' (in)security. So surfing on web I discovered this extremely easy, fast and lite IDS (or maybe it's better to say: "LOGS watcher" ) called DecaffeinatID.
It has 3 main capabilities :

1) Arp Watcher. It looks inside the windows ARP table and alerts you when the mac address of your gateway change.



2) Security Log's Watcher. If someone is attempting to your host security, fighting whit the host's security policies, the Security Log will change and DecaffeiatID sends an alert to you.



3) Firewall Log's Watcher. Agin, if something strange happen, where strange means against your firewall rules, it's able to look into firewall logs showing up what's going on.




I'm glad to have founded that software, I know it's not complete and powerful such snort (or similar) but it's really fast to use, pretty much intuitive; to configure-it look here, and light for the system resources.

1 comment:

priyanka said...

Do you still use free service like blogspot.com or wordpress.com but
they have less control and less features.
shift to next generation blog service which provide free websites for
your blog at free of cost.
get fully controllable (yourname.com)and more features like
forums,wiki,CMS and email services for your blog and many more free
services.
hundreds reported 300% increase in the blog traffic and revenue
join next generation blogging services at www.hyperwebenable.com
regards
www.hyperwebenable.com