psad: psad (Intrusion Detection and Log Analysis with iptables) psad: psad: psad is a collection of three lightweight system daemons (two main psad: daemons and one helper daemon) that run on Linux machines and analyze psad: iptables log messages to detect port scans and other suspicious. psad: traffic. A typical deployment is to run psad on the iptables firewall psad: where it has the fastest access to log data. psad: psad: psad: Homepage: http://www.cipherdyne.org/psad/ psad: