On Tue, Jun 08, 2004 at 12:24:26PM -0400, Mark Bucciarelli wrote: > I like logcheck because it is simple. But it's not packaged for Debian, so > maybe no-one here uses it. If not, what tool do you recommend for > intrusion detection? Logcheck is a good tool, and can be modified easily. It *is* packaged for Debian as you can see from this link: http://packages.debian.org/logcheck Steve -- Looking for an interesting Job - http://www.steve.org.uk/