RE: Tripwire (clone) which would you prefer?
I have used AIDE (Advanced Intrusion Detection Environment) both in production use and when I've been an instructor on unix security courses I've made the students learn to use it, because it's really simple and easy to use. Even though it's quite simple, I don't see it lacking anything important in qualities.
TONI HEINONEN
TELEWARE OY
Tel. +358 40 836 1815
Itäkeskuksen Maamerkki
00930 Helsinki, Finland
toni@teleware.fi * www.teleware.fi
> -----Original Message-----
> From: Jan Lühr [mailto:jluehr@gmx.net]
> Sent: Monday, February 23, 2004 11:42 AM
> To: debian-security@lists.debian.org
> Subject: Tripwire (clone) which would you prefer?
>
>
> Greetings,
>
> well, I looking for an open source intrusion detection. At
> first, tripwire
> caputures my attention, but the last open source version
> seems to be three
> years old - is it still in development or badly vulnerable?
> Then I searched for tripwire in the woody packages and found
> integrit and
> bsign - so which would you prefer and why?
> Are there any interesting other projekt that worth looking for?
>
> Keep smiling
> yanosz
>
>
> --
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org
>
>
Reply to: