Software-Karte

autofwd is an automated firewalling daemon intended to block hosts performing unwanted acts. While it was designed to be used to thwart hosts running dictionary attacks on logins (of any service), it can be used for just about anything. The external commands it runs are configurable, allowing you to take additional actions against offending hosts such as running an nmap OS fingerprint before firewalling, or just silently logging the event.

UCARP allows a pair of hosts to share common virtual IP
addresses in order to provide automatic failover. It is a
portable userland implementation of the secure and patent-
free Common Address Redundancy Protocol (CARP,
OpenBSD's alternative to VRRP). Strong points of the CARP
protocol include its very low overhead, cryptographically
signed messages, interoperability between different
operating systems and no need for any dedicated extra
network link between redundant hosts.

lwatch is a log parser/analyzer written in C with the PCRE library. It is small and efficient. You are able to define your own colors using regexp patterns. The biggest advantage compared to other tools written in Perl is its speed.

Newsd is a standalone local NNTP news server for
private newsgroup serving on a single server. It
is useful for serving private newsgroup(s) to an
intranet or the Internet, and can act as a simple
mail gateway. However, it does not interface with
other news servers and cannot manage distributed
news feeds, i.e. Usenet news.

pfflowd is a small daemon which converts real-time
state expiry messages from OpenBSD's PF packet filter
into Cisco NetFlow datagrams. This allows very fine-
grained traffic accounting in conjunction with NetFlow
capable tools and places almost no incremental load on
a PF firewall.

libsigrokdecode is a shared C library that provides (streaming) protocol decoding functionality. The protocol decoders are written in Python (>= 3.2).

tk_cdconverter is a Tcl/Tk frontend to rip and convert a CD into a directory and set some tags. Conversion between different formats is also possible.

With Snort2Pf, you can turn your local Snort
installation easily into an "intrusion detection
and prevention system", rather than simply using
it for post-mortem analysis. Such a system also
blocks the recognized violations.

fdm (fetch and deliver mail) is a simple, lightweight replacement for mail fetching, filtering, and delivery programs such as fetchmail and procmail. It can fetch using POP3, POP3S, IMAP, IMAPS, or stdin, and deliver to a pipe, file, maildir, mbox, or SMTP server, based on a set of regexps. It can be used for both single user and multiuser setups, and is designed with privilege separation when running as root.

Relevation is a command-line interface to retrieve passwords stored with the Revelation Password Manager. It provides equivalent functionality to the "Find" box as found in Revelation's GUI.

wzdftpd is designed to be a small, efficient, and highly modular/configurable FTP server for various platforms including Linux and Windows. The server is RFC compliant, multi-threaded and can be configured entirely online using SITE commands. You can write your own extensions to the server in your choice of language, extending on existing MySQL, PostgreSQL, SQLite, Tcl, Perl, PAM, and SFV plugins. Features include IPv6, TLS/SSL, UTF8, ACLs, VFS, events, scripting, plugins, job scheduler, bandwidth limitations, credits/sections, group administration, and customizable logging.

HATop is an interactive ncurses client and real-time monitoring and statistics displaying tool for the HAProxy TCP/HTTP load balancer. HATop's appearance is similar to top(1). It supports various modes for detailed statistics of all configured proxies and services in near real-time. In addition, it features an interactive CLI for the HAProxy Unix socket. This allows administrators to control the given HAProxy instance (change server weight, put servers into maintenance mode, etc.) directly out of HATop (using keybinds or the CLI) and monitor the results immediately.