[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: monitor my debian machine, swatch?



Hi,
swatch or maybe sec are the right tools.

It´s easy to integrate swatch into syslog (I prefer syslog-ng).
Then you can (s)watch for expressions and release some events .

Chris
--On Montag, 19. Januar 2004 17:18 +0100 Michael Meckelein <michael@go-on-line.de> wrote:

Hi all,

I want to monitor my debian machine. I found a really nice tool whowatch.

Now, in my environment is still a very important component left. I need a
email notification if someone login by ssh/ftp/telnet and if someone
request a special folder on my apache webserver (e.g.
www.mydomain.com/special/ ). The notification should include the user's
name, ip, timestamp and service name (ssh, telnet, ...).

Anyone know a tool that can handle my requirements?

By searching the web for monitoring tools, I have found swatch. I'm not
really sure if it fits to me. The man page shows that I can monitor log
files using reg ex to find events. Also email notification is available.
But my feeling is that the configuration of swatch is a overhead in my
case. And do I need for each service a separate configuration file, one
for ssh, one for ftp, ...?

Please advice, is swatch the right one? Or if there another simple tool
that can do what I want?

Thanks in advance.
Michael


--
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact
listmaster@lists.debian.org





Reply to: