BotHunter is a passive network monitoring tool designed to recognize the communication patterns of malware-infected computers within your network perimeter.  Using an advanced infection-dialog-based event correlation engine (patent pending), BotHunter represents the most in-depth network-based malware infection diagnosis system available today.

What's new in BotHunter v1.0.4:  New Features

Your system should have a modern Intel Pentium-class or Motorola PowerPC processor, at least 1 GB RAM, and at least 1 Ethernet NIC/WIC (for network monitoring).

*  Windows XP/Vista/2003 Server 32/64-bit Distribution v1.0.4
   BotHunter-Windows-Distribution-1.0.4a.exe
     (MD5 = 62a135fe8d8b793cfa87ea97d25c9b86, 30 June 2009)
     Installation Advice for Windows Users:  Click Here

*  Unix Distribution v1.0.4 
     BotHunter-Unix-Distribution-v1.0.4.tar.gz
     (MD5 = 11f395c13dd8ac153bbe503de9a11df1, 5 June 09)
     Linux: tested on Fedora, Red Hat Enterprise Linux, Debian, and SuSE distributions
    FreeBSD: tested on product release 7.2
    Mac OS X: tested on Tiger and Leopard, Mac OS 10.4 and 10.5

*  Live CD Distribution v1.0.4   -   Coming Soon

Thank you all for your interest, encouragement, and great feedback.  Please do continue to send us your comments / questions / feedback:

Your name or alias:    
Your organization:     

Your email:  

Other resources for finding help:   FAQ,   Troubleshooting Guide,    Community Forum

Submit your comments or questions to the BotHunter Development Group:

Regarding which OS?

General

WinXP

MacOS

Linux

FreeBSD

LiveCD

Your Comment or Question. 
Please ensure you fill out the above email field if you would like a response.


Join the BotHunter mailing list: YES NO (If YES, please fill out the email field)
     

The BotHunter team gratefully acknowledges those increasingly fewer U.S. funding agencies that are actively supporting new research in information security.    We especially thank Cliff Wang at ARO for his support of the Cyber-TA project and  BotHunter.