If you love snort, you'll definiately want to check out demarc:

http://www.demarc.org

Here's a definition from their front page:

---
DEMARC is an all-inclusive network monitoring program that allows you to
monitor an entire network of servers from one powerful web interface.

Instead of having one program perform file integrity checks, another
program monitoring the connectivity and health of your network, and yet
another monitoring your network for intrusion detection attempts, DEMARC
combines all three services into one powerful client/server program. Not
only can you monitor the status of the different machines in your
network, but you can also respond to changes in your network all from
one centralized location.

Security is already a full time job in any network, and sometimes the
burden of monitoring the reports from multiple programs across dozens of
servers can result in information overload. The human mind can only
process so much data at any given time before it simply becomes too much
to analyze. DEMARC centralizes the reporting and analysis for the entire
network and allows you to more easily weed out the important data from
the superfluous background noise, thereby targeting your efforts where
they really belong.
---

Made quite the splash at DefCon too, I hear.

Cheers,

-Charlie
On Tue 14 Aug at 17:13:00 -0500 [EMAIL PROTECTED] done said:
> > "Eduardo P. Rom�n O." wrote:
> > 
> > Who knows, a good alert system for my Linux. I installed portsentry,
> > but i don�t know how to do get a mail from this alert attacks.
> > 
> > EPRO
> 
> If you are looking for a good IDS, take a look at http://www.snort.org.
> This IDS has some very nice features, and, when working with some
> associated programs, such as ACID, will allow you flexibility. And, then
> again, there is the standby "tcpdump".
> 
> drjung
>  
> -- 
> J. Craig Woods
> UNIX SA
> 
> -Art is the illusion of spontaneity-
> 

> Want to buy your Pack or Services from MandrakeSoft? 
> Go to http://wwww.mandrakestore.com


-- 
GPG Key fingerprint = 4F36 EC4F 2F2C 5F59 9690  09E5 4C0F 9DB0 8623 53CE
        In the east there is a shark which is larger than all other fish.  It
changes into a bird whose winds are like clouds filling the sky.  When this
bird moves across the land, it brings a message from Corporate Headquarters.
This message it drops into the midst of the program mers, like a seagull
making its mark upon the beach.  Then the bird mounts on the wind and, with
the blue sky at its back, returns home.
        The novice programmer stares in wonder at the bird, for he understands
it not.  The average programmer dreads the coming of the bird, for he fears
its message.  The master programmer continues to work at his terminal, for he
does not know that the bird has come and gone.
                -- Geoffrey James, "The Tao of Programming"

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://wwww.mandrakestore.com

Reply via email to