This is, in a way, the opposite of logcheck in that autobuse identifies known badness and deals with it automatically, while logcheck identifies known goodness and leaves you with the rest. Detects and responds to port scans against a target host inreal-time. It is a program designed to detect and respond to port scans against a target host in real-time. It runs on TCP and UDP sockets and works on most UNIX systems. Advanced stealth detection modes are available under Linux only and detect SYN, FIN, NULL, XMAS, and Oddball packet scans.
All modes support real-time blocking and reporting of violations.
It is able to send fake pings and replies back to the client which is trying to access your system. Abacus Sentry Detects the use of a port scanner in real-time. The program tcpdump will also be needed in order to run Courtney. See below for information about tcpdump. Logs to either syslog or strerr.