Security Incidents mailing list archives

Solaris BSM Audit Logs

From: wozz+incidents () WOOKIE NET (Wozz)
Date: Mon, 17 Jan 2000 17:04:04 -0700


I'm curious if anyone has any pointers to packages that can parse the output of
Solaris's praudit into some more readable form.  Does anyone have any good
suggestions?  Open source only please, and preferably in perl.

Current thread:

Re: IRC-bots: what are they for ?, (continued)
- - - Re: IRC-bots: what are they for ? Filip M. Gieszczykiewicz (Jan 12)
    - Strange behaviour Belgarion of Riva (Jan 13)
    - Re: Strange behaviour Richard Bejtlich (Jan 15)
    - UDP probing [ trojan? ] mabrown () SECUREPIPE COM (Jan 17)
    - Re: UDP probing [ trojan? ] Jose Nazario (Jan 18)
    - Probe from UK Provider ? Duarte Cordeiro (Jan 18)
    - Re: Probe from UK Provider ? Pauline van Winsen (Jan 19)
    - Re: Probe from UK Provider ? Arrigo Triulzi (Jan 20)
    - Re: Probe from UK Provider ? Gene Harris (Jan 20)
    - Re: Probe from UK Provider ? Jason Witty (Jan 20)
    - Solaris BSM Audit Logs Wozz (Jan 17)
    - Re: Strange behaviour John Turner (Jan 17)
    - SMTP bombing Kaupo Palo (Jan 18)
    - Log tools? Chad Day (Jan 17)
    - Re: Log tools? James Phillips (Jan 17)
    - Re: Log tools? Gene Harris (Jan 18)
    - Re: Log tools? Richard Trott (Jan 17)
    - Re: Log tools? Pauline van Winsen (Jan 18)
    - AMD/Port 100099 and portmap Daniel K. Boyd (Jan 18)
    - Re: AMD/Port 100099 and portmap CyberPsychotic (Jan 18)
    - Large quantity of traffic from amazon.com - source_port 3000 Peter Bates (Jan 13)

(Thread continues...)