[unisog] Host Based IDS

Ty Bodell tebodell at gmail.com
Tue May 10 16:22:08 GMT 2005


Have you checked out SNARE?  I've been using SNARE since they just had
it for Linux and I like it quite a bit.  The newer releases are very
configurable.  It's worth checking out.

http://www.intersectalliance.com/projects/index.html

Goodluck,
Ty

On 5/10/05, Steven Tonge <stonge at ph.ed.ac.uk> wrote:
> We are looking to install a host-based IDS on the Linux machines on our
> network (~150 machines). We currently use the Academic release of
> Tripwire but are looking to move to a more client/server based model.
> 
> The two packages that have come to my attention are Samhain and Osiris.
> Does anyone have any opinion on these or any other suggestions.
> 
> Thanks
> 
> Steven
> 
> _______________________________________________
> unisog mailing list
> unisog at lists.sans.org
> http://www.dshield.org/mailman/listinfo/unisog
>



More information about the unisog mailing list