Re: Linux based HIDS

[Michael Rice <michael () riceclan org>]

I'm currently a fan of samhain with beltane and mysql bolted on, does
the file level audit and some extras on Linux.  Doesn't do the system
log analysis.  

On Tue, Oct 14, 2003 at 10:52:20AM +0530, Milind Nanal wrote to To focus-ids () securityfocus com:
> Hi,
>
> I am looking for good , free , open source HIDS for Linux server. The tool
> which detects :-
>
> Attacks on Red Hat Linux OS. 
> Analysis system log
> Carry our file level audit (like tripwire) 
>
> all in one product. 
>
> Quick response is highly appreciated
>
>
> Thanks in advance.
>
> Milind
>
> ---------------------------------------------------------------------------
> Captus Networks IPS 4000
> Intrusion Prevention and Traffic Shaping Technology to: 
>  - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans
>  - Automatically Control P2P, IM and Spam Traffic
>  - Precisely Define and Implement Network Security & Performance Policies
> FREE Vulnerability Assessment Toolkit - WhitePapers - Live Demo 
> http://www.securityfocus.com/sponsor/CaptusNetworks_focus-ids_000101
> ---------------------------------------------------------------------------

---------------------------------------------------------------------------
Network with over 10,000 of the brightest minds in information security
at the largest, most highly-anticipated industry event of the year.
Don't miss RSA Conference 2004! Choose from over 200 class sessions and
see demos from more than 250 industry vendors. If your job touches
security, you need to be here. Learn more or register at
http://www.securityfocus.com/sponsor/RSA_focus-ids_031023 
and use priority code SF4.
---------------------------------------------------------------------------