Intrusion Detection Systems mailing list archives

Re: Host based IDS ???

From: lamp () deviant org (Patrick Michel)
Date: Mon, 14 Feb 2000 19:52:10 -0600



LogCheck and HostSentry  which are available on www.psionic.com are good.
Simple and effective.

-----Original Message-----
From: bruno.pradal () free fr <bruno.pradal () free fr>
To: ids () uow edu au <ids () uow edu au>
Date: Monday, February 14, 2000 5:18 PM
Subject: IDS: Host based IDS ???

---------------------------------------------------------------------------
---
Hi,

I'm actually searching for Host-based IDS tools which automatically
monitor
Unix audit logs (syslog, accounting, audit, ...). I would like those
tools to
raise alarms when events corresponding to attack-signatures occures.

Does anybody knows about those kind of tools (or tested)?

Thanks a lot.

B. PRADAL

Current thread:

Re: batch web log intrusion analysis tools Craig H. Rowland (Jan 17)
- Re: batch web log intrusion analysis tools B Potter (Feb 10)
  - Re: batch web log intrusion analysis tools (+ Introduction) Glenn Larsson (Feb 11)
    - Re: batch web log intrusion analysis tools Mitko Stoyanov (Feb 13)
    - Host based IDS ??? bruno.pradal () free fr (Feb 14)
    - SWIFT Message Monitoring Justin Lister (Feb 14)
    - IDS Conferences Andy (Feb 14)
    - Re: Host based IDS ??? Patrick Michel (Feb 14)