On Sat, 28 Jul 2001, Peter Jay Salzman wrote:
> i'm sick and tired of looking at my logfiles for some dumb reason and finding
> activity that i don't want to be happening like failed logins, attempts to
> access insecure cgi's, ftp attempts that shouldn't be happening, etc.
>
> i know there are utilities out there that look at logfiles on a regular basis
> and reports suspicious activity. does anyone here use one? any
> recommendations?
I have used logcheck and tripwire (does things beyond log examination)
both can be customiazed. Have not tried any others such as xlogmaster, or
web log app tool analog.
-ME
-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS/CM$/IT$/LS$/S/O$ !d--(++) !s !a+++(-----) C++$(++++) U++++$(+$) P+$>+++
L+++$(++) E W+++$(+) N+ o K w+$>++>+++ O-@ M+$ V-$>- !PS !PE Y+ !PGP
t@-(++) 5+@ X@ R- tv- b++ DI+++ D+ G--@ e+>++>++++ h(++)>+ r*>? z?
------END GEEK CODE BLOCK------
decode: http://www.ebb.org/ungeek/ about: http://www.geekcode.com/geek.html
Systems Department Operating Systems Analyst for the SSU Library
