|
LAST
UDPATE:
Trinux
What
is Trinux?
Getting
Trinux
Who is Trinux?
Updates
Features
Current
Tools
FTP
Site
Goals
About
Installation
Support
Training
Links
|
|
| Trinux is a portable Linux distribution
that boots from 2-3 floppies (or a FAT 16 partition) and runs entirely
in RAM. Trinux contains the latest versions of popular network security
tools and is useful for mapping and monitoring TCP/IP networks.
Trinux transforms an ordinary x86
PC into a powerful network [security] management workstation without modifying
the underlying hardware or operating system. The default configuration
uses a stripped down version of kernel 2.0.36 that should boot on any 386
or better with at least 12-16 megabytes of RAM. Hardware support for NICs
is provided through kernel modules which may be downloaded
and copied to the boot medium.
Here are screenshots of some of the tools that are available. NOTE: X-Windows is not available on Trinux. I only used it for the screen capture.
Trinux is released under the terms of the GNU Public License. See Eric Raymond's page (www.opensource.org) for details.
(c) Copyright 1999 Matthew Franz and the Trinux Development Project
Please read the FAQ
or search the Trinux mailing
list before asking a question. |
- Pre-0.49 floppy images are now available. The floppies now support the features added to TrinuxHD about a month ago. Most importantly the modem.tgz package now works-- on my system at least. If you follow the un-Linux-like prompts and type ppp-go you should be able to log via your ISP. Man ppp gives you some background information and nmap -D will allow you to roll your own "sophisticated and coordinated attacks" from foreign countries against domestic sites of your choosing. A better idea: spend your milk money on TCP/IP Illustrated Volume 1 and sniff your modem traffic using tcpdump till you get a clue. Oh yeah, the dialup data disk may become a hot commodity soon because I imagine I'll yank it after the third message I get asking how to sniff passwords with tcpdump.
- Besides releasing a new TrinuxHD image (pre 0.49) yesterday, there is now a package for Bind 4.9.7 that runs a caching nameserver straight out of the box.
- Trinux is now available from CheapBytes on the CheapBytes Stampede Linux BETA w/TinyLinux CD for only $1.99. It should be available on Monday.
- made significant updates to the Trinux Tools Page. Worth checking out... IMNSHO the only page that comes close to this is Bernd Eckenfels Freefire project -- check it out!! I'll let you be the judge.
- Trinux 0.48 flopppies released, available here. Contains new versions of the core Trinux tools you know and love: nmap, ntop, iptraf, and others.
- thanks to Joey Maier of the Trinux Documentation Team for putting together a table that lists what kernel module should be used for each NIC card.
- added screenshots for all the visual learners out there. Xterms are a beautiful thing.
- Update netmap1.tgz to include the latest nmap (2.02) and exscan (0.3). Deleted tcp_scan.
- Posted a long rant about Trinux goals, etc. to the development mailing list. If anybody else is interested in becoming an official member of the Trinux Team send me and email.
- 0.47 floppies and packages are now available. Updated nmap, ntop, spak. Rearranged packages. NOTE: TrinuxHD has not been released although you can use the packages with the TrinuxHD from 0.45, although you still have to use 2.0.35 kernel modules.hhhhh
- someone out there created
a #trinux channel on IRC (efnet). Give it a try, if you dare!
- created a directory for
user contributed/experimental packages.See /pub/trinux/packages/contrib.
- modified netconfig
script in netbase.tgz so it will automatically create config files
for ip,dns,gateway,etc. on the boot disk so you don't have to enter them
each time. Finally!
- added 2 modules for Apache
1.3.3 (apache.tgz and htroot.tgz) as well as data
disk that contains Apache and Perl. Try it out! Add httpd -d /var/apache
to your post.rc so Apache loads when Trinux boots. Ftp your .html
into /var/apache/htdocs and you're set!
- A big Thanksgiving thanks
to Brian Fleming of Irenyx Data Group,
Inc. for adding the web
interface to the Trinux mailing list.
- updated kernel modules
for upcoming 0.50 release, updated ntop to 1.1a4 (netmon1.tgz) added
dig
to netmap2.tgz.
- Version
0.45 Floppies released!
- TrinuxHD
0.45 is out! Install in c:\trinux on a Windows partition, cd to \trinux
and type trinux! It works "out of the box" on my Laptop. Let me know if
it doesn't work on yours so I can fix it. Don't forget to download the
kernel module for your NIC from here.
See the FAQ for
more info. Also uploaded /packages/0.45
directory. Includes new pcmcia package and ipgrab v0.6.
- added firewalk
to netmap1.tgz and a new package called system.tgz that contains
crontab and syslog.
IMPORTANT: I only update the boot/data
images when a new version is released. If you want the latest tools,
you'll have to have to add the packages to the data disk yourself.
|
Obtaining
Trinux
Download the boot
and data disks and any kernel modules from here. If you don't know which module you need for your NIC check here first.
Then read the directions below and in the FAQ
.
clscxx.gz - generic data disk with
standard set of tools including the following packages: netbase, netmon1,
netmon2, netmon3, server, snmp, netmap1, netmap2, system, expldos.
apache.gz - Perl & Apache 1.3.3
disk including: netbase, apache, htroot, perlbase, perli386, perlmods.
NOTE: Linux Netscape users
need to shift-click on these links and make sure they add the .gz suffix.
For some reason it strips it off.
The boot disks are MSDOS formatted floppies so you can add or delete
package or kernel module files easily from Windows.
|
|
Complete List of
Tools
anger arp bounix clog cold(1.10) drpcscan
firewalk icmp_redir ipfwadm ipgrab(0.6) ipresend ipsend iptest iptraf(1.4.1)
linsniffer nat nc neped netstat netwatch(0.8) nfs_check nmap(2.06) nslookup
ntop(1.0) pcmcia(3.05) perl(5.004) ping queso rdns readsmb rpcinfo rr shlight(1.0)
sniffit(0.3.7) snmpget snmpset snmpwalk spak(0.6b) statnet strobe(1.3)
tcp_scan tcpdump(3.4a7) traceroute udp_scan whois z0ne
See the tools
page for more information about these.
this table and copy them to the boot disk. There should be about 75k left. The disks
are DOS formatted.
READ THE FAQ
FIRST!
The following people are "officially" working on Trinux:
Original Developer & Project Leader - Matthew Franz
- Trinux Core - Matthew Franz, Matt Cerha, Dragos Ruiu
- Trinux IDS / DTK - Carlos Garcia, HD Moore, Stefan Keller, Dragos Ruiu
- Trinux Firewall - Alex Newman
- Trinux Scanner - HD Moore, Will Whittaker
- R&D - Ken Williams, Giulio Vada, Mike Hore
- QA - Joe Schwendt, Joey Maier
- DOCS - Bob Tripp, Joey Maier, Mike Hore
- #trinux admin - Alex Newman
Send me an email if you want to join the Trinux development team. Tell me what you have to offer and specifically what you want to do/what you think needs to be done!
Desired Skills: system administration/design, PCMCIA support!, network tools, testing/QA, Perl/shell scripting, HTML, CGI, tech writing/editing (despite my BA in English!!)
-
Provide the most comprehensive and up-to-date
suite of network security/monitoring tools available in any Linux distribution.
-
Implement modular and easily customized Open
Source security solutions that rival their commercial counterparts:
-
network monitoring and intrusion detection
and honey pot
-
firewalls and virtual private networks (VPNs)
-
network mapping and penetration analysis
-
secure web serving
-
Allow a maximum amount of configuration and
customization from non-Linux (i.e. Windows 95/98/NT) operating sytems.
-
Support multiple installation architectures
without compromising core features:
-
Floppy disks - Trinux Classic
-
DOS/Windows partition - TrinuxHD
-
Ext2 Filesytem - small (?mb) partition
-
Package support for mainstream Linux distributions
(Debian, SuSE, RedHat, Caldera, Slackare)
-
Bootable CD-ROM
Trinux packages (tarball, debs, RPMs, etc.)
for all major distributions
Easy PPP Support for Win32 users
CD-ROM distribution
data disk for each of four solutions above:
netmap, ids, firewall, webserver
Win32 Install Program (arggh)
Strong encryption, authentication (distributed
from a non-US/CAN site, of course)
NOTE:
Trinux is not attempting to develop a "secure" version of Linux
(something comparable to OpenBSD). We believe that every effort should
be made to strengthen existing mainstream distributions. Trinux attempts
to provide customized Linux security solutions when it may not be possible
or practical to install a complete distribution.
Feel free to direct questions, comments,
flames, etc. about this to me
You basically have options: 1) send me
email, 2) subscribe to the trinux listserv by sending a subscribe
trinux, or
3) check out the #trinux channel on IRC and see if anyone has clue.
message
to [email protected]
A big thanks for all of you out there who
have given me feedback since Trinux was first released in April of 1998.
However, there are several out there who have greatly contributed to this
project and deserve to be mentioned: Kevin
O'Brien for convincing Irenyx to provide this server, Ken Williams
at Packet Storm for
lots of good publicity, and most importantly my wonderful wife, Amelia,
for putting up with all the time I spend on this nonsense.
And oh yeah, WirM, for the spiffy new
web page. |
|