Re: IDS

[Tinus Nijmeijers <mlists@deephosting.com>]

On Fri, 2004-08-06 at 19:57, Dan MacNeil wrote:
> > I also want to use something like tripwire to set up file intregity.
> 
> 	apt-cache search tripwire
> 	apt-cache show aide
> 
I know, and, as I mentioned, they both seem OLD.

> On Fri, 6 Aug 2004, Tinus Nijmeijers wrote:
> 
> > I'm looking at securing a new server.
> >
> > i'll be using iptables to restrict acces and i want to install SNORT to
> > watch the network.
> > I also want to use something like tripwire to set up file intregity.
> >
> > however: tripwire seems OLD, last version (2.3.1) is from march 3, 2001
> >
> > i've also seen AIDE mentioned, same thing, aide version 0.10 is from
> > november 2003
> >
> > is that a problem?
> > any other apps I should look into concerning file intregity?
> >
> > eg:
> > -samhain
> > -integrit
> > -tiger
> >
> > any experiences?
> > thanks, tinus

can I assume that no-one here uses a file-integrity checker?


tinus.