scanlogd is commonly running by default with a number of distro's;
it's features are limited, though, and it can be "tricked" as well...
For me, it's noticed when I ftp a large recursive directory.
The man page points out its limitations...
I noticed some DoS-detection software on the university's system recently,
and I think there are a number of solutions for linux as well.
<sorry no more leads>
ben
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
in lake'ch, my kin... 4 Ix
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
psst! visit the LUGE homepage at http://eugene-linux.cyber-dyne.com
