« Return to Thread: Recommend good IDS? was Re: /dev/shm/r?

Re: Recommend good IDS? was Re: /dev/shm/r?

by Izak Burger :: Rate this Message:

Reply to Author | View in Thread

On Wed, Jun 3, 2009 at 5:53 PM, john <lists.john@...> wrote:
> I'd be interested to hear some recommendations for IDS to run on
> internet facing servers. Especially from the point of view of ease of
> installation, ease of maintenance, quality of the tool, and ability to
> have it deliver really useful information to the admin. I've used
> SNORT a bit in the past and my feeling was that it was so chatty that
> it was actually hard to tell if something bad was happening or not.

We use aide.


--
To UNSUBSCRIBE, email to debian-security-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

 « Return to Thread: Recommend good IDS? was Re: /dev/shm/r?