3 Point Release 0.1 - Reached 19 May 2009
5 * Persistant local DB (SQLite)
6 * Database (SQL via DBI)
7 * Text File Log via tee
12 * UDP os fingerprinting
13 * ICMP os fingerprinting
14 * Text File Log (default, not stdout)
15 * prads.deb and prads.rpm package
18 * udp-service fingerprinting and detection
19 * tcp-service detection
20 * Client application Fingerprinting
27 (* prads2sguil.pl script)
30 * Graphic display of network topology
33 Passive DNS : Only on the answer from the DNS SERVER
34 TIMESTAMP,DNS-SERVER-IP,QUERY-TYPE,QUERY-CLASS,QUERY-DATA,RESURSE-TYPE,RESURSE-CLASS,RESURSE-DATA,MISC
35 TIMESTAMP: unixtimestamp
36 DNS-SERVER-IP: The ip of the dns server responding
37 MISC: Other data in the answer
38 foreach additional record $UDP-DNS-PAYLOAD {
39 TIMESTAMP,DNS-SERVER-IP,QUERY-TYPE,QUERY-CLASS,QUERY-DATA,RESURSE-TYPE,RESURSE-CLASS,RESURSE-DATA,MISC
51 * When we are satisfied with:
58 * If performance is an issue ? C/C++ ?
59 * CVE coorolation on services, not in prads, but prads GUI ?