/etc/prads/prads.conf is in prads 0.3.0-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 | # -----------------------------------------------------------------------------
#
# prads.conf
#
# This file contains configuration parameters for the PRADS application.
#
# PRADS ships with an empty configuration file with all the default values in comments.
# PRADS has sane defaults and will run fine without conf file.
# Part of this config can be reloaded while running by sending SIGHUP to PRADS
# -----------------------------------------------------------------------------
#
# daemon
# -------------------------
# This parameter determines whether the application will go into the background.
# 0 = Disable, 1 = Enable
#daemon=0
#
# ARP discover
# -------------------------
# This parameter determines whether the application will enable ARP discovering of assets.
# 0 = Disable, 1 = Enable
#arp=1
#
# TCP service/client discover
# -------------------------
# Theese parameters determines whether the application will enable TCP service/client discovering.
# 0 = Disable, 1 = Enable
#service_tcp=1
#client_tcp=1
#
# UDP services discover
# -------------------------
# This parameter determines whether the application will enable UDP service/client discovering.
# 0 = Disable, 1 = Enable
#service_udp=1
#
# OS SYN fingerprinting
# -------------------------
# This parameter determines whether the application will enable OS SYN fingerprinting.
# 0 = Disable, 1 = Enable
#os_syn_fingerprint=1
#
# OS SYN+ACK fingerprinting
# -------------------------
# This parameter determines whether the application will enable OS SYN+ACK fingerprinting.
# 0 = Disable, 1 = Enable
#os_synack_fingerprint=1
#
# OS Stray ACK fingerprinting
# -------------------------
# This parameter determines whether the application will enable OS Stray ACK fingerprinting.
# Stray ACK is not a reliable fingerprint.
# 0 = Disable, 1 = Enable
#os_ack_fingerprint=0
#
# OS RST fingerprinting
# -------------------------
# This parameter determines whether the application will enable OS RST fingerprinting.
# RST is a less reliable fingerprint than SYN and SYNACK.
# 0 = Disable, 1 = Enable
#os_rst_fingerprint=1
#
# OS FIN fingerprinting
# -------------------------
# This parameter determines whether the application will enable OS FIN fingerprinting.
# FIN is a less reliable fingerprint than SYN and SYNACK.
# 0 = Disable, 1 = Enable
#os_fin_fingerprint=1
#
# OS UDP fingerprinting
# -------------------------
# This parameter determines whether the application will enable UDP based OS fingerprinting.
# 0 = Disable, 1 = Enable
#os_udp=0
#
# ICMP fingerprinting
# -------------------------
# This parameter determines whether the application will enable ICMP based OS fingerprinting.
# ICMP Discovery must be enabled
# 0 = Disable, 1 = Enable
#os_icmp=1
#
#-- Runtime flags described above can be reloaded at runtime by sending SIGHUP
#-- Changes to params described below this line will be ignored by SIGHUP
#
# asset_log
# -------------------------
# Filename of the prads log asset log file for the file output plugin,
# A textfile PRADS stores discovered assets in.
# asset_log=/var/log/prads-asset.log
#
# chroot_dir
# -------------------------
# Chroot directory. Prads will chroot to this directory after initializing.
# NOTE: The default is not to chroot. Below is suggested value.
#chroot_dir=/var/run/prads
#
# pid_file
# -------------------------
# Filename of the prads PID file.
#
# The pid file gets written after chrooting, dropping privileges, and
# daemonizing. It should therefore be relative to chroot_dir and owned by th
# prads user.
# NOTE: the default is not to daemonize nor create a pidfile.
#pid_file=/var/run/prads.pid
#
## Signature file locations are relative to CONFDIR which is usually /etc/prads
#
# sig_file_syn
# -------------------------
# Alternate location for the SYN signatures
# not honored by prads.pl
#sig_file_syn=/etc/prads/os.fp
#
# sig_file_synack
# -------------------------
# Alternate location for the SYNACK signatures
# not honored by prads.pl
# sig_file_synack=/etc/prads/osa.fp
#
# sig_file_serv_tcp
# -------------------------
# Alternate location for the tcp service signature file
#sig_file_serv_tcp=/etc/prads/tcp-services.sig
#
# sig_file_cli_tcp
# -------------------------
# Alternate location for the tcp client signature file
#sig_file_cli_tcp=/etc/prads/tcp-client.sig
#
# sig_file_serv_udp
# -------------------------
# Alternate location for the udp service signature file
#sig_file_serv_udp=/etc/prads/udp-services.sig
#
# sig_file_cli_udp
# -------------------------
# Alternate location for the udp client signature file
#sig_file_cli_udp=/etc/prads/udp-client.sig
#
# mac_file
# -------------------------
# Alternate location for the prads-ether-codes file.
#mac_file=/etc/prads/prads-ether-codes
#
## user
## -------------------------
## This is the username prads-archiver will run as when started as root.
## Default is to drop to uid 1 which corresponds to user daemon on most systems
#user=daemon
#
## group
## -------------------------
## This is the name of the group prads-archiver will run as when started as root.
## Default is to drop to gid 1 which corresponds to group daemon on most systems
#group=daemon
#
# interface
# -------------------------
# This contains the name of the interface PRADS will listen to.
# PRADS will try to auto-detect the interface if none specified.
#
# Note! Only one interface at a time is supported currently.
# interface=eth0
# interface=wlan0
# interface=en0 # Mac OSX
#
# bpfilter
# -------------------------
# This value contains a libpcap filter to be applied to PRADS.
# bpfilter 'src net 192.168.0.0 mask 255.255.255.0 or dst net 192.168.0.0 mask 255.255.255.0'
# bpf-example for monitoring only your assets on 192.168.10.0/24:
# bpfilter=src net 192.168.10.0 mask 255.255.255.0
# NOTE: Be aware if you have vlan-tagged traffic...
#bpfilter=src net 0.0.0.0 mask 0.0.0.0 or dst net 0.0.0.0 mask 0.0.0.0
#
# fifo
# -------------------------
# PRADS FIFO file - sguil compatible fifo output for asset log
# NOTE: There is no default fifo.
# fifo=prads.fifo
|