labrea / News: Recent posts

Labrea halts worm and malware progression by making unused IP addresses look like inviting targets.

Version 2.5 contains many new features such as autoconf / automake support, libdnet support, dynamic firewall ports, speed improvements, more secure cmd-line parsing, CIDR style input parameters, and debug support.

Labrea halts worm and malware progression by making unused IP addresses look like inviting targets. The new 2.5 Beta-2 code updates libdnet support and fixes some outstanding bugs.

This should be almost production-grade code. Because of the more secure command-line parsing, we recommend using this instead of the 2.4-stable version.

Tom Liston has released the production version of LaBrea V2.4.

Changes include:
* Windows / Unix code share same codebase - same functions.

• Now supports Windows platforms other than WinNT

• Single configuration file; possibility of ignoring specific IPs
  or ports

• Optional use of Dns to determine occupied addreses

• Better BSD support, better support of switch environments,
  better bandwidth tracking.

LaBrea is Tom Liston's popular IDS / "Sticky Honeypot" that acts as a "tarpit" for worms, hackers, and other malware. We have just moved to SourceForge.

As a extra attraction, we have just released a new beta that was on the back burner: LaBrea-2.5-beta-1. Support for autoconf / automake is included. The code is based on Dug Song's libdnet.