~~~Need help with class Need a Demo of a management software or network security program for inclass demo~~~

[EXman]

I need to give a 10 min presentation on some sort of network security or network management software program that I can get a demo for my network design class. I am open for suggestions and really would like something easy to use /explain.

any help would be greatly appreciated!

 

[minendo]

Why not explain ZoneAlarm?

 

[n0cmonkey]

IPtables, IPFilter, Packet Filter, Snort, Squid, tcpdump, ethereal, ntpd, mrtg... The list is endless.

 

[Soybomb]

Around a school it might be quick and information to perform a quick wireless security audit with netstumbler/kismet/wellenreiter/airnort/airopeek/etc.

 

[EXman]

thanks for the suggestions. up 4 some more. anyone have a link?

oh and I cannot do ZA someone already is.

 

[Garion]

How about GFI LanGuard. It's an excellent (free!) program that will scan a network for security holes. Call it a "Network Vulnerablity Scanner" or something. You can download it free, then give it a shot. Try to scan your school network. Find a few subnets that are particularily juicy and then walk through the process in a class demo, then show them what you found.

Optional, for extra credit: Find a good hole on the teacher's computer, hack in and change your grade to an A. *grin*

- G

 

[EXman]

thanks G

 

[EXman]

up for any other ideas

 

[EXman]

Still looking for ideas not set on anything just yet

 

[SR]

Do a demo of a syslog analyzer. Most companies regardless of size have them but less than 10% of them are being monitored in any fashion. A few vendors who make syslog analysers are cisco's resource essentials, netiq's web trends, and rnr software reportgen. Print out a few screenshots from each and easily make a report out of that.

 

[EXman]

thanks SR free demos availible?

 

[Woodie]

Smoothwall - smoothwall.org (linux-based firewall/IDS/VPN)
Snort - freeware IDS
NTLast - Windows Eventlog Analyzer
Kiwi SysLogger - freeware Syslog daemon...we use it for Firewall log collation/analysis

 

[EXman]

thanks Woodie

 

[Abzstrak]

you could use nmap... nmapfe maybe good for a demo since people like GUI's...

Another good one would be the paketto tools...

 

[EXman]

Thanks Abz

is it really "nmapfe"? just looks like a typo

 

[n0cmonkey]

Originally posted by: EXman
Thanks Abz

is it really "nmapfe"? just looks like a typo

nmap Front End is what it stands for. Its a pretty gui for a program that doesnt really need it anyways

If you want to be closer to the cutting edge of neat security solutions, take a look at systrace. Its pretty neat, Ive been playing with it for a little while now on OpenBSD 3.2 and Im definitely impressed.

 

[Abzstrak]

I dunno n0c, I think the paketto tools are just about as much on the cutting edge as you can get...

systrace does look cool, looks like something esle to download and play with

 

[EXman]

thanks again fellas...