RE: Logwatch vs logsentry vs swatch vs ?

["Benjamin Meade" <ben () lanwest com au>]

Personally, I run a RH 7.3 box running apache, sendmail, and bind and a
couple of other services, and use logwatch to monitor them all. I works
pretty well, never had any problems with it.

Benjamin Meade
System Administrator
LanWest Pty Ltd 

-----Original Message-----
From: Stephen [mailto:bitbucket () look ca] 
Sent: Saturday, 8 March 2003 12:45 PM
To: 'Fred Dirkse - OIC Group, Inc.'
Cc: security-basics () securityfocus com
Subject: RE: Logwatch vs logsentry vs swatch vs ?

Fred,

I've managed to find a couple of versions of PortSentry and LogSentry
(URLs are good as of 2003-03-07):

http://www.teamjackass.com/portsentry-2.0b1.tar.gz
http://www.teamjackass.com/logsentry-1.1.1.tar.gz 

Hope this helps.

-sp

-----Original Message-----
From: Fred Dirkse - OIC Group, Inc. [mailto:fred () oicgroup net] 
Sent: Thursday, March 06, 2003 1:26 PM
To: security-basics () securityfocus com
Subject: Logwatch vs logsentry vs swatch vs ?


I am looking to implement a log monitoring system on a Red Hat 7.3 box
configured as a dedicated qmail server.  Any suggestions? logcheck is
now logsentry apparently and with the Cisco buyout, doesn't seem to be
readily available and probably not supported in the near future.
Whatever I use needs to be easily configurable with qmail log monitoring
as well as standard system log monitoring.

Regards,
Fred Dirkse