1HSEN(1) General Commands Manual HSEN(1)
2
3
4
6 hsen - hosts3d sensor
7
9 hsen id interface/file [destination] [-p]
10
12 hsen is a packet capture daemon which reads and sends packet header
13 information to Hosts3D, locally or remotely. hsen also equates host‐
14 name to IP by reading DNS packets (UDP type A class IN standard query
15 response). Multiple sensors can send information to multiple computers
16 running Hosts3D on the same subnet via broadcast.
17
18 id Identify packets from a specific hsen when multiple exist
19 (1-255).
20
21 interface Listen on interface (eth0, eth1, ppp0, wlan0, etc.); or
22
23 file Read packets from pcap file. Standard input is used if
24 file is "-".
25
26 destination Hosts3D IP or broadcast address (default localhost).
27
28 -p Enable promiscuous mode (default disable).
29
31 Firewall configuration: hsen talks to Hosts3D via UDP port 10111. If
32 hsen is running and Hosts3D is not, ICMP Port Unreachable (UDP port
33 10111) may be generated. To capture packets from some interfaces, or
34 in promiscuous mode, you may have to start hsen as root (sudo). hsen
35 logs to syslog, check when troubleshooting. Support only for IPv4. IP
36 headers with options are ignored. Support for packets with optionless
37 GRE or VLAN 802.1Q encapsulation.
38
40 hosts3d(1)
41
43 Written by Del Castle.
44
46 Report bugs to <hosts3d@gmail.com>.
47
49 Copyright (c) 2006-2010 Del Castle
50 This program is free software; you can redistribute it and/or modify it
51 under the terms of the GNU General Public License as published by the
52 Free Software Foundation; either version 2 of the License, or (at your
53 option) any later version.
54 This program is distributed in the hope that it will be useful, but
55 WITHOUT ANY WARRANTY; without even the implied warranty of MER‐
56 CHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General
57 Public License for more details.
58
59
60
61 07 Feb 10 HSEN(1)