Chuck Norris botnet detection plugin
Tomáš Plesník, Michal Trunečka, Pavel Piskač, Jan Vykopal, Pavel Čeleda · 2010
Chuck Norris botnet detection plugin for NfSen collector periodically analyses NetFlow data. The plugin provides output of detection methods aimed at botnet behaviour during its lifecycle: port scanning from infected hosts outside the local network, scanning from infected hosts in the local network, communication with the botnet distribution and control servers, and DNS spoofing.