[rescue] Do you remember when? Security software.....

[Kevin]

As stated, Nmap and snort, both are killer apps in my book.  There's also LIDS for the linux kernel.  SATAN is a bit outdated but still can't hurt.  There's also LAST, but i have never used that one myself.  There is an open sourced (i.e. free) version of Tripwire, i use it on my linux servers here at work, but i don't know if it is portable to other OS/architectures.

/KRM

On Fri, 8 Aug 2003 13:02:25 -0400
Phil Stracchino <alaric at caerllewys.net> wrote:

> On Fri, Aug 08, 2003 at 12:27:58PM -0400, Michael A. Turner wrote:
> > 	What I am trying to remember now is the other programs people have
> > mentioned for doing security auditing. The subject has come up at work again
> > and they are looking to hire a company monthly to do the auditing. I want to
> > be able to cut them off at the pass by either A. Doing the job better than
> > them saving us money, or B. Debunking them by calling shenanigans by
> > recognizing the software that they are running. So can anyone though out any
> > good software packages in this area? Also some good intrusion detection
> > software wouldn't hurt also. 
> 
> Look at nmap and snort, for starters.  And there's tripwire, but you'll
> have to pay for it.  Bacula, however, can be configured to do a
> tripwire-like job since it maintains hashes in either MD5 or SHA1 of
> every file on every target system.
> 
> 
> -- 
>  .*********  Fight Back!  It may not be just YOUR life at risk.  *********.
>  : phil stracchino : unix ronin : renaissance man : mystic zen biker geek :
>  :  alaric at caerllewys.net : alaric-ruthven at earthlink.net : phil at latt.net  :
>  :   2000 CBR929RR, 1991 VFR750F3 (foully murdered), 1986 VF500F (sold)   :
>  :    Linux Now!   ...Because friends don't let friends use Microsoft.    :
> _______________________________________________
> rescue list - http://www.sunhelp.org/mailman/listinfo/rescue


-- 
keyserver: http://pgp.mit.edu/