pynids

Intro

pynids is a python wrapper for libnids, a Network Intrusion Detection System library offering sniffing, IP defragmentation, TCP stream reassembly and TCP port scan detection. Let your own python routines examine (or kill) network conversations.

pynids is free software, licensed under the GPL.

Current Version

This release fixes build problem on FreeBSD, and improves documentation of object methods and members. Requirements are: Python >= 2.2, libpcap and libnet. Note that libnids itself is bundled with this release.

• README
• CHANGES
• Example

pynids is beta. Stream reassembly and protocol handlers work; see the README for incomplete areas. Development/testing platforms are Linux (2.4 kernel) and OpenBSD 3.6.

Related Interest

pynids Applications
• flowgrep
  ngrep meets tcpflow meets tcpkill, in python.

Libraries
• libnids
  The library on which pynids rests.
• libnet
  Facile packet creation.
• libdnet
  Simplified interface to low-level networking; CVS has a python face, too.
• libpcap
  You've probably heard of this one.

Network Helpers
• snort IDS
  It's a pig!
• prelude IDS
  It's an ant!
• Bro IDS
  It's a creepy oculus sinister!
• tcpflow
  It's a TCP flow recorder!