Re: Logcheck Keyword Files
On Tuesday 08 June 2004 12:31, Steve Kemp wrote:
> On Tue, Jun 08, 2004 at 12:24:26PM -0400, Mark Bucciarelli wrote:
> > I like logcheck because it is simple. But it's not packaged for
> > Debian, so maybe no-one here uses it. If not, what tool do you
> > recommend for intrusion detection?
>
> Logcheck is a good tool, and can be modified easily.
>
> It *is* packaged for Debian as you can see from this link:
>
> http://packages.debian.org/logcheck
That's great, thanks.
Do you just use the stock filter files that come with the package?
Regards,
Mark
Reply to: