Re: Detecting break-ins
On Wed, Jan 16, 2002 at 07:14:38AM -0800, Alvin Oga wrote:
>
> hi ya
>
> On Wed, 16 Jan 2002, Yotam Rubin wrote:
>
> > On Tue, Jan 15, 2002 at 09:04:07PM +0100, Balazs Javor wrote:
> > > Hi,
> > >
> > > Recently I've installed some IP logging deamons
> > > (snort, ippl along with logcheck) and I was amazed
>
> you'd need (host/network) IDS's in addition to the above log checkers
>
Regarding host IDS you might want to take a look at 'tiger' (updated in Debian
although it still has some quirks...)
Javi
Reply to: