``find_ddos'' will detect these denial of service programs: tfn2k client,

tfn2k daemon, trinoo daemon, trinoo master, tfn daemon, tfn client,
stacheldraht master, stacheldraht client, stachelddraht demon and tfn-rush
client.

5 files changed, 42 insertions, 0 deletions

diff --git a/security/find_ddos/Makefile b/security/find_ddos/Makefile
new file mode 100644
index 0000000..da3af32
--- /dev/null
+++ b/security/find_ddos/Makefile
@@ -0,0 +1,28 @@
+# ex:ts=8
+# Ports collection makefile for:  find_ddos
+# Version required:		  3.1
+# Date created:			  Sun Feb 12, 2000
+# Whom:				  David O'Brien (obrien@NUXI.com)
+#
+# $FreeBSD$
+#
+
+DISTNAME=	find_ddos_v31_linux
+PKGNAME=	find_ddos-3.1
+CATEGORIES=	security
+MASTER_SITES=	http://www.fbi.gov/nipc/
+EXTRACT_SUFX=	.tar.Z
+
+MAINTAINER=	obrien@FreeBSD.org
+
+do-build:
+	@brandelf -t Linux ${WRKSRC}/find_ddos
+
+do-install:
+	@${INSTALL_PROGRAM} ${WRKSRC}/find_ddos ${PREFIX}/sbin
+.if !defined(NOPORTDOCS)
+	@${MKDIR} ${PREFIX}/share/doc/find_ddos
+	@${INSTALL_MAN} ${WRKSRC}/README ${PREFIX}/share/doc/find_ddos
+.endif
+
+.include <bsd.port.mk>
diff --git a/security/find_ddos/distinfo b/security/find_ddos/distinfo
new file mode 100644
index 0000000..c0bf7e9
--- /dev/null
+++ b/security/find_ddos/distinfo
@@ -0,0 +1 @@
+MD5 (find_ddos_v31_linux.tar.Z) = e2687f1cfaa3cca954836fa8a1846eb8
diff --git a/security/find_ddos/pkg-comment b/security/find_ddos/pkg-comment
new file mode 100644
index 0000000..3e3ae56
--- /dev/null
+++ b/security/find_ddos/pkg-comment
@@ -0,0 +1 @@
+Scans a host filesystem for distributed denial of service programs
diff --git a/security/find_ddos/pkg-descr b/security/find_ddos/pkg-descr
new file mode 100644
index 0000000..cba78a6
--- /dev/null
+++ b/security/find_ddos/pkg-descr
@@ -0,0 +1,11 @@
+In response to a number of distributed denial-of-service (DDOS) attacks that
+have been reported, the National Infrastructure Proctection Center (NIPC)
+Special Technology Applications Unit (STAU) has developed a tool to assist in
+combating this threat.  ``find_ddos'' is intended to scan a local system that
+is either known or suspected to contain a DDOS program.
+
+``find_ddos'' will detect tfn2k client, tfn2k daemon, trinoo daemon, trinoo
+master, tfn daemon, tfn client, stacheldraht master, stacheldraht client,
+stachelddraht demon and tfn-rush client.
+
+WWW:	http://www.fbi.gov/nipc/trinoo.htm
diff --git a/security/find_ddos/pkg-plist b/security/find_ddos/pkg-plist
new file mode 100644
index 0000000..26498e7
--- /dev/null
+++ b/security/find_ddos/pkg-plist
@@ -0,0 +1 @@
+sbin/find_ddos