Bugtraq mailing list archives
Re: syslog idea
From: fred () nasirc hq nasa gov (Fred Blonder)
Date: Fri, 07 Oct 1994 12:11:28 -0400
From: "Jonathan M. Bresler" <jmb () kryten atinc com> On Fri, 7 Oct 1994, Fred Blonder wrote: At the FIRST Conference in Boston a couple months ago, Gene Spafford ^^^^^^^^^^^^^^^^^^ before the latest release of tripwire ;) . . . said he'd consider it in a future version. and he did! Not exactly, the release was 'pending' at the time of the conference, so I doubt that any major changes occurred between the time of the conference and the latest release. take a look at the Changelog and at tw.conf.XXX files. you can specify that tripwire should ignore changes in size, access time, modification time and signatures for log files. Yes, but, that's not the same thing. The point of checkpointing a logfile would be to verify that the portion up to that last checkpoint had not been tampered with, that is compute a digital signature for part of the file.
Current thread:
- thanks!, (continued)
- thanks! Michael Bresnahan (Oct 06)
- SMAIL Aleph One (Oct 06)
- Re: SMAIL joshua geller (Oct 06)
- Re: SMAIL James Seng (Oct 07)
- one smail bug dan (Oct 07)
- syslog idea *Hobbit* (Oct 06)
- Re: syslog idea David Kovar (Oct 06)
- Re: syslog idea Jonathan M. Bresler (Oct 07)
- Re: syslog idea Fred Blonder (Oct 07)
- Re: syslog idea Jonathan M. Bresler (Oct 07)
- Re: syslog idea Fred Blonder (Oct 07)
- Re: syslog idea Jonathan M. Bresler (Oct 08)