hsen

Langue: en

Version: 174725 (fedora - 06/07/09)

Autres sections - même nom

Section: 8 (Commandes administrateur)

Sommaire

NAME

hsen - hosts3d sensor

SYNOPSIS

hsen id interface/file [destination]

DESCRIPTION

hsen is a packet capture daemon which reads and sends packet header information to Hosts3D, locally or remotely. hsen also equates hostname to IP by reading DNS packets (UDP type A class IN standard query response). Multiple sensors can send information to multiple computers running Hosts3D on the same subnet via broadcast.
id
Number used to identify packets from a specific hsen when multiple exist. Range 1 to 255.
interface
Listen on interface: eth0, eth1, ppp0, wlan0, etc.; or
file
Read packets from pcap file. Standard input is used if file is ``-''.
destination
IP or broadcast address to send Hosts3D UDP packets to. If omitted, default is 127.0.0.1 (localhost).

NOTES

Firewall configuration: hsen talks to Hosts3D via UDP port 10111. If hsen is running and Hosts3D is not, ICMP Port Unreachable (UDP port 10111) may be generated. hsen logs to syslog, check when troubleshooting. Support only for IPv4. Fragmented packets are ignored.

SEE ALSO

hosts3d(1)

AUTHOR

Written by Del Castle.

REPORTING BUGS

Report bugs to <hosts3d@gmail.com>. Copyright (c) 2006-2009 Del Castle
This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.