BSD Ports

security/maltrail 0.74 DragonFly

Malicious traffic detection system, utilizing public (black)lists

System
DragonFly
Repository
DPorts
Maintainer
[email protected] (as in FreeBSD)
License
MIT
Categories
python, security
Package size
7737.8 KiB, 31034.4 KiB installed

Description

Maltrail is a malicious traffic detection system, utilizing publicly available (black)lists containing malicious and/or generally suspicious trails, along with static trails compiled from various AV reports and custom user defined lists, where trail can be anything from domain name (e.g. zvpprsensinaix.com for Banjori malware), URL (e.g. http://109.162.38.120/harsh02.exe for known malicious executable), IP address (e.g. 185.130.5.231 for known attacker) or HTTP User-Agent header value (e.g. sqlmap for automatic SQL injection and database takeover tool). Also, it uses (optional) advanced heuristic mechanisms that can help in discovery of unknown threats (e.g. new malware).

In the other systems

SystemPortVersion
DragonFlysecurity/maltrail0.74
FreeBSDsecurity/maltrail1.4
HardenedBSDsecurity/maltrail1.4
GhostBSDsecurity/maltrail1.4
OPNsensesecurity/maltrail1.4

Install

Binary package:

pkg install maltrail

From DPorts:

cd /usr/dports/security/maltrail && make install clean

Dependencies

Run dependencies 3

No port depends on this one.