[Dshield] httpd logs

[Tony Earnshaw]

Rick Leir skrev, on 18-06-2007 21:13:

> How about monitoring http attack attempts, which generally show up in
> /var/log/httpd/error_log?
> This has probably been discussed before, but my searches of the archive
> were not helpful.
> 
> Better still, application level attack attempts seen by IPS's.
> cheers -- Rick

logwatch in, at any rate, Red Hat RHEL5/CentOS5/FC6 has begun to warn of 
such attempts - which happen frequently on all my rigs.

--Tonni

-- 
Tony Earnshaw
Email: tonni at hetnet dot nl