DoSDetector analyze and detect suspicious traffic from IP and alert about it. It can detect worm traffic, SYN flood, icmp flood, udp flood etc... It's configurable via set of rules which have some points assigned to IP by matching rule. When IP exceed points limit, dosdotector print warning.
Created attachment 60742 [details] dosdetector-20050605.ebuild
Created attachment 60743 [details] ChangeLog
Created attachment 60744 [details] metadata.xml
FYI, we don't need metadata or changelog, just ebuild is enough. Thanks.
In-tree now