LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 12-17-2007, 02:52 PM   #1
kaplan71
Member
 
Registered: Nov 2003
Posts: 808

Rep: Reputation: 39
Combining psad with fwsnort and sshauth.pl


Hi there

I have psad 2.1 running in auto_ids mode, and I have it configured, via the auto_dl file with a whitelist of known good servers. The next step I had in mind was utilizing fwsnort and sshauth.pl with psad.

I downloaded version 1.0.3 of fwsnort, and ran the fwsnort binary to create the fwsnort.pl file. The newly created .pl file has the appropriate whitelisted servers within it. Similarly, I downloaded the sshauth.pl file from the cipherdyne website.

My question is the following: If I want to use fwsnort and sshauth .pl files, do I have them run in daemon mode? If not in that manner, what is the correct way to have them interoperate with psad? Thanks.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Psad coolb Linux - Security 3 12-14-2006 03:31 AM
fwsnort gabsik Linux - Security 3 04-09-2006 05:34 AM
ip addresses blocked by psad wilcsnyder Linux - Security 1 08-28-2004 05:59 AM
psad says DL5 dominant Linux - Security 3 03-25-2004 03:50 PM
Question on PSAD code? cxel91a Programming 0 09-05-2003 05:10 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 08:18 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration