« Return to Thread: Recommend good IDS? was Re: /dev/shm/r?

Re: Recommend good IDS? was Re: /dev/shm/r?

by Rick Moen :: Rate this Message:

Reply to Author | View in Thread

Quoting Boyd Stephen Smith Jr. (bss@...):

> I inherited a tripwire installation at some point.  It was one mail message
> per day (and if you didn't get that message you knew something was wrong).
>
> It required a bit of tuning to not report errors regularly, but once I spent
> that time it was fairly hands-off.

One way to use Tripwire in conjunction with a slightly more modern and
lightweight file-based IDS alongside it:
http://linuxgazette.net/issue98/moen.html

(That article is not, however, a comparative review, which is apparently
what the original poster is seeking.)

--
Cheers,                      Notice:  The value of your Hofstadter's Constant
Rick Moen                    (the average amount of time you spend each month
rick@...          thinking about Hofstadter's Constant) has just
McQ!  (4x80)                 been adjusted upwards.


--
To UNSUBSCRIBE, email to debian-security-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

 « Return to Thread: Recommend good IDS? was Re: /dev/shm/r?