todo

来自「也是一个linux系统下的网络入侵检测程序」· 代码 · 共 12 行

o printk can be replaced by attacker so a secure way for output is necessary
o Change moddumper to Client/Server architeture to reduce disk write.
o Add PAE support for mod_hunter
o Add more architecture support.
o Add IPv6 support
o Add 2.4 kernel suport
o Add 2.2 kernel suport (someones need it although it has been obsolete)
o Improve dismod to handle symbols within the dump.
o Improve dismod to identify obfuscated code and segment separation.

YOU CAN GIVE US MORE IDEAS.