Intrusion Detection System On Linux

AmitC · 10-19-2004, 03:10 AM

HI,

I want to install Intrusion detection system on my network comprising of RedHat Linux servers AS 3.0.
What are the tools available for it and how can I do it?

I would prefer monitoring tools that I can monitor from my workstation having WinXP.

Regards,
AmitC

maxut · 10-19-2004, 03:34 AM

maybe snort can help u. www.snort.org
u can get rpms from http://dag.wieers.com/packages/snort/

snort creates logs but i dont know how to see that logs from xp workstation. u can ssh to linux and check it yourself. or u can write a simple shell script to send the logs to your email account. maybe it is possible to configure snort to alert u.
if u search about snort at www.sourceforge.net u will probably find lots of monitoring tools for snort.

i dont know enough about snort, so i cant help u much.
good luck.