Simple Linux IDS

A simple intrusion detection system (IDS) that filters ICMP packet via tcpdump and send the packet info to a windows-specific monitoring/receiving program via TCP.

Getting Started

• In both ids.py and ids_monitoring.py, change the SERVER var to the local IP of the Windows machine.
• On the Linux machine ensure Python3 is installed.

sudo python3 PATH/TO/ids.py

• On Windows, ensure python 3 is installed as well as win10toast.

python3 PATH/TO/ids_monitor.py

• With both endpoints running, try pinging the Linux machine.

ping <IP/HOSTNAME> -n 1

• If successful, a Windows notification should appear.