Contents of this package:

     SHADOW-1.6: The main analyzer directory, containing the principal SHADOW 
              scripts.

     analyzer_crontab
     cleanup.pl
     fetchem.pl
     find_scan.pl
     one_day_pat.pl
     one_day_script.pl
     pat_match.pl
     sort_and_resolve.pl
     strip.pl

     SHADOW-1.6/docs: This subdirectory contains documentation of the
                      SHADOW package, including the README files for each
                      of the previous releases, statements on the Y2K 
                      status of Perl and RedHat Linux, etc.

     INSTALL
     MANIFEST
     README-1.0
     README-1.2
     README-1.3
     README-1.3a
     README-1.4
     README-1.4a
     README-1.4b
     README-1.5
     README-1.6
     README-ALL
     RedHat_y2k.html
     RedHat_y2k.txt
     SHADOW_y2k.txt
     VERSION
     perl_y2k.html
     perl_y2k.txt

     SHADOW-1.6/accessories: This subdirectory contains a README file with 
                             URLs that link to sites holding the auxilliary 
                             tools needed for SHADOW.

     filters/Site1:      The subdirectory containing example filters for an
                         example site named "Site1."

     filter.README
     filter.components.doc
     filter.getall
     filter.goodhost.doc
     goodhost.filter
     icmp.filter
     icmp.filter.doc
     ip.filter
     ip.filter.doc
     spare_ip.filter.doc
     tcp.filter
     tcp.filter.doc
     udp.filter
     udp.filter.doc

     SHADOW-1.6/filters/TEMPLATE: A subdirectory containing templates 
                                  for building filters for your sites.

     filter.README
     filter.components.doc
     filter.getall
     filter.goodhost
     filter.goodhost.doc
     icmp.filter
     ip.filter
     tcp.filter
     udp.filter

     SHADOW-1.6/filters/generic: A subdirectory containing a collection of 
                                 tcpdump filters which will identify generic 
                                 events in a tcpdump file.

     anyflags
     broadcast
     everything-else
     frags+zero-offset
     frags-only
     icmp
     igrp
     imap
     in-ftp
     in-http
     in-pop3
     in-ssh
     in-telnet
     incoming
     low_ports
     multiflags
     netbios
     nfs
     non-echo_icmp
     non-mail-name
     non-tcp_bad_events
     not-private
     out-http
     port-1080
     port_31337
     port_8181
     portmap
     private-ips
     r-utils
     reset
     snmp
     src+dst_port_zero
     src=dst
     statd
     statd2
     tcp-connections
     tcp_bad_events
     udp
     zone_transfers

     SHADOW-1.6/httpd/cgi-bin: This subdirectory contains the cgi-bin scripts
                               necessary for running the SHADOW system. The
                               scripts need to be moved to the cgi-bin directory
                               specified in your Apache configuration file.

     IR_seq
     compose_IR.cgi
     dir-it.cgi
     home.cgi
     kill_group.cgi
     lookup.cgi
     pat_match_form.cgi
     tools.cgi
     whois.cgi
     privileged:
          .htaccess
          nmap.cgi
          nmap_pwd

     SHADOW-1.6/httpd/conf: This subdirectoy contains examples of the Apache
                            configuration files which work for us. See the 
                            Apache documentation for more detailed information.

     access.conf
     httpd.conf
     mime.types
     srm.conf

     SHADOW-1.6/httpd/home: This subdirectory contains the home page of the 
                            SHADOW analyzer. It must be placed where you set
                            the "DocumentRoot" variable in your Apache 
                            configuration files.

     shadow.html
     .htaccess

     SHADOW-1.6/httpd/images: This subdirectory contains the images and icons
                              used by the SHADOW system to generate its web 
                              pages.

     08a.jpg
     GoodGuysLogo.jpg
     abort.jpg
     blank_blue.jpg
     compose.jpg
     directory.jpg
     lookup.jpg
     nmap.jpg
     print.jpg
     report.jpg
     scan.jpg
     search.jpg
     team_shadow.jpg
     whois.jpg
     navbars/2/1.jpg
     navbars/2/1off.jpg
     navbars/2/2.jpg
     navbars/2/3.jpg
     navbars/2/5.jpg
     navbars/2/5off.jpg

     SHADOW-1.6/sensor: This subdirectory contains the scripts which the sensor
                        machine runs to collect the tcpdump raw data. Only the
                        contents of this directory need to be on the sensor.

     README.scripts
     sensor_crontab
     sensor_init.sh
     start_logger.pl
     stop_logger.pl
     sensor_driver.pl
     std.ph
     std.filter
     gmt.ph
     gmt.filter

     SHADOW-1.6/sites: This subdirectory contains examples of the Perl header
                       files used by the SHADOW analyzer, which must be 
                       customized for your site.

     GENERIC.ph
     Site1.ph
