Red Hat Security - Intrusion Detection / Auditing

Author

Intrusion Detection / Auditing

Charles Howse

2004-01-23, 7:50 pm

Hello Group,
I need to install some intrusion detection and/or auditing software on my
RedHat 8.0 server, which runs in character mode - no X, no way ;-)

I have 2 Windows machines on the same home LAN that I could use for
monitoring purposes, but I would prefer to get alarms as instant pop-ups on
the Windows machines:

# echo "Intruder Detected!" | smbclinet -M XP_machine

I've done some light research into SNARE, but it seems it needs X for the
front-end.

I've used tripwire before, don't like it.

I'm wide open to any suggestions.

TIA,
Charles

KTyson9426

2004-01-23, 7:50 pm

sounds like snort meets your requirements... it's an Open Source IDS
software... runs on various platforms including linux & windows... run at the
command line... and you can pipe alerts out to the smbclient