On Tuesday 20 August 2002 10:24 pm, you wrote: > David Relson wrote: > > At 05:40 PM 8/20/02, you wrote: > > >Hi guys, > > >the title pretty much says it all. > > >I want to look at total traffic and be able to analyse the logs for > > > intrusion attempts > > >any suggestions? > > >-- > > > > Have you looked at webalizer? I believe it's pretty good for analyzing > > apache logs :-) However, it may not be intrusion oriented :-( > > I agree with the choice of webalizer. It is very easy to install, has a > very nice interface with apache, and mandrake delivers a rpm for your > convenience. Intrusion detection would necessitate another kind of > program altogether, i.e. NIDS. In this direction, I would suggest you > take a look at snort. A very nice program that will provide you with > numerous alerts for all http traffic to port 80. > > drjung of course, if what you mean is you want to see what pages are requesting graphics from your site, (like is someone else's web page making use of my bandwidth by refering to graphics on my site) then webalizer, (and reading the logs, the software cann't do it by itself) is the right answer
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
