sancp-1.6.2-0.C.5.3-rosa2014.1.x86_64.rpm


Advertisement

Description

sancp - Security Analyst Network Connection Profiler

Property Value
Distribution ROSA 2014.1
Repository ROSA Contrib x86_64
Package name sancp
Package version 1.6.2
Package release 0.C.5.3-rosa2014.1
Package architecture x86_64
Package type rpm
Installed size 206.52 KB
Download size 69.64 KB
Official Mirror mirror.rosalab.ru
This is a network security tool designed to collect statistical
information regarding network traffic, as well as, collect the traffic
itself in pcap format, all for the purpose of: auditing, historical
analysis, and network activity discovery. Rules can be used to
distinguish normal from abnormal traffic and support tagging
connections with: rule id, node id, and status id. From an intrusion
detection standpoint, every connection is an event that must be
validated through some means. Sancp uses rules to identify, record, and
tag traffic of interest. 'Tagging' a connection is a new feature since
v1.4.0 Connections ('stats') can be loaded into a database for further
analysis.
Sancp rules control three types of logging for a connection: pcap,
stats, and realtime 'pcap' refers to packet data collected on the
connection in tcpdump format, 'stats' refers to a single line summary
of an entire connection once it is 'closed' 'realtime' is a snapshot of
'stats' based on the initial packet, for immediate reporting Both
'stats' and 'realtime' contain a number of fields used for recording
packet statistics, TCP flags, p0f data, and other vitals about how we
handle the connection.

Alternatives

Package Version Architecture Repository
sancp-1.6.2-0.C.5.3-rosa2014.1.i586.rpm 1.6.2 i586 ROSA Contrib
sancp - - -

Requires

Name Value
libc.so.6()(64bit) -
libc.so.6(GLIBC_2.14)(64bit) -
libc.so.6(GLIBC_2.2.5)(64bit) -
libc.so.6(GLIBC_2.3)(64bit) -
libc.so.6(GLIBC_2.3.4)(64bit) -
libc.so.6(GLIBC_2.4)(64bit) -
libgcc_s.so.1()(64bit) -
libgcc_s.so.1(GCC_3.0)(64bit) -
libm.so.6()(64bit) -
libnsl.so.1()(64bit) -
libpcap.so.1()(64bit) -
libresolv.so.2()(64bit) -
libstdc++.so.6()(64bit) -
libstdc++.so.6(CXXABI_1.3)(64bit) -
libstdc++.so.6(GLIBCXX_3.4)(64bit) -
rpm-helper -

Provides

Name Value
config(sancp) == 0:1.6.2-0.C.5.3:2014.1
sancp == 0:1.6.2-0.C.5.3:2014.1

Download

Type URL
Binary Package sancp-1.6.2-0.C.5.3-rosa2014.1.x86_64.rpm
Source Package sancp-1.6.2-0.C.5.3.src.rpm

Install Howto

  1. Enable ROSA Contrib repository on Install and Remove Software
  2. Update packages list:
    # urpmi.update -a
  3. Install sancp rpm package:
    # urpmi sancp

Files

Path
/etc/logrotate.d/sancp
/etc/prelude/profile/sancp
/etc/rc.d/init.d/sancp
/etc/sancp/sancp.conf
/etc/sysconfig/sancp
/usr/bin/sancp
/usr/share/doc/sancp/CHANGES
/usr/share/doc/sancp/INSTALL
/usr/share/doc/sancp/ISSUES
/usr/share/doc/sancp/LICENSE
/usr/share/doc/sancp/README
/usr/share/doc/sancp/README.urpmi
/usr/share/doc/sancp/SCHEMAS
/usr/share/doc/sancp/SETUP
/usr/share/doc/sancp/fields.LIST
/usr/share/doc/sancp/contrib/Makefile.bsd
/usr/share/doc/sancp/contrib/bin/sancpconfig
/usr/share/doc/sancp/contrib/bin/sancpongoing
/usr/share/doc/sancp/contrib/bin/sancpreload
/usr/share/doc/sancp/contrib/bin/sancpstop
/usr/share/doc/sancp/contrib/init.d/sancpd
/var/lib/sancp
/var/log/sancp/sancp.log

Changelog

2012-02-01 - Rosa <rosa@rosa-build.rosalab.ru> 0:1.6.2-0.C.5.3
+ Revision: a42ba66
- Automatic import for version 1.6.2

See Also

Package Description
sarg-2.3.2-2-rosa2014.1.x86_64.rpm Squid report generator per user/ip/name
sauerbraten-2013_02_03-2-rosa2014.1.x86_64.rpm A multi-player/single-player first person shooter
sauerbraten-data-2013_02_03-2-rosa2014.1.noarch.rpm Standalone Sauerbraten server for LAN and Internet gaming
sauerbraten-server-2013_02_03-2-rosa2014.1.x86_64.rpm Standalone Sauerbraten server for LAN and Internet gaming
sawfish-1.10-2-rosa2014.1.x86_64.rpm An extensible window manager for the X Window System
sawfish-devel-1.10-2-rosa2014.1.x86_64.rpm Development files for Sawfish
sawfish-pager-0.90.3-2-rosa2014.1.x86_64.rpm Lightweight desktop pager for Sawfish
saxon-9.2.0.3-5-rosa2014.1.noarch.rpm Java XPath, XSLT 2.0 and XQuery implementation
saxon-demo-9.2.0.3-5-rosa2014.1.noarch.rpm Demos for saxon
saxon-javadoc-9.2.0.3-5-rosa2014.1.noarch.rpm Javadoc for saxon
saxon-manual-9.2.0.3-5-rosa2014.1.noarch.rpm Manual for saxon
saxon-scripts-9.2.0.3-5-rosa2014.1.noarch.rpm Utility scripts for saxon
saxon-xslt2-7.8-6-rosa2014.1.noarch.rpm Saxon XSLT2 Processor in Java
sbcl-1.1.14-2-rosa2014.1.x86_64.rpm Steel Bank Common Lisp compiler and runtime system
sbxkb-0.7.6-4.2-rosa2014.1.x86_64.rpm Simple keyboard indicator
Advertisement
Advertisement