From owner-freebsd-security Mon Mar 5 19:59:54 2001 Delivered-To: freebsd-security@freebsd.org Received: from point.osg.gov.bc.ca (point.osg.gov.bc.ca [142.32.102.44]) by hub.freebsd.org (Postfix) with ESMTP id 9F9BC37B718 for ; Mon, 5 Mar 2001 19:59:51 -0800 (PST) (envelope-from Cy.Schubert@uumail.gov.bc.ca) Received: (from daemon@localhost) by point.osg.gov.bc.ca (8.8.7/8.8.8) id TAA13500; Mon, 5 Mar 2001 19:59:44 -0800 Received: from passer.osg.gov.bc.ca(142.32.110.29) via SMTP by point.osg.gov.bc.ca, id smtpda13498; Mon Mar 5 19:59:40 2001 Received: (from uucp@localhost) by passer.osg.gov.bc.ca (8.11.2/8.9.1) id f263xZU69401; Mon, 5 Mar 2001 19:59:35 -0800 (PST) Received: from cwsys9.cwsent.com(10.2.2.1), claiming to be "cwsys.cwsent.com" via SMTP by passer9.cwsent.com, id smtpdI69399; Mon Mar 5 19:58:58 2001 Received: (from uucp@localhost) by cwsys.cwsent.com (8.11.3/8.9.1) id f263wvE34816; Mon, 5 Mar 2001 19:58:57 -0800 (PST) Message-Id: <200103060358.f263wvE34816@cwsys.cwsent.com> Received: from localhost.cwsent.com(127.0.0.1), claiming to be "cwsys" via SMTP by localhost.cwsent.com, id smtpdL34546; Mon Mar 5 19:58:04 2001 X-Mailer: exmh version 2.3.1 01/18/2001 with nmh-1.0.4 Reply-To: Cy Schubert - ITSD Open Systems Group From: Cy Schubert - ITSD Open Systems Group X-Sender: schubert To: Rob Simmons Cc: freebsd-security@FreeBSD.ORG Subject: Re: tripwire In-reply-to: Your message of "Mon, 05 Mar 2001 22:14:15 EST." Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Mon, 05 Mar 2001 19:58:03 -0800 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org In message , Rob Simmon s writes: > What are the benefits/disadvantages between the two tripwire ports and the > tripwirish aide port? Tripwire 1.3.1 fixes a number of bugs found in tripwire 1.2, however the licenses are different. I personally haven't encountered the bugs but the people at Tripwiresecurity say that they are there. The commercial version, Version 2, which Tripwresecurity has made the Linux version of the source available, which I might port to FreeBSD as well, adds new signatures, improves memory utilisation reducing paging and increases the number of files that can be monitored before tripwire dies. It also has an interface to the Tripwire console, which allows a central security administrator to monitor 100-200 UNIX and NT systems, freeing up UNIX and NT admin staff to do more rewarding work. I will be discussing the Tripwire version 2 license with someone at tripwire tomorrow. Functionally Aide is smaller and faster. It supports different signatures, however it lacks an interactive mode, e.g. you need to specify which files have changed on the command line or rebuild the database from scratch. Regards, Phone: (250)387-8437 Cy Schubert Fax: (250)387-5766 Team Leader, Sun/Alpha Team Internet: Cy.Schubert@osg.gov.bc.ca Open Systems Group, ITSD, ISTA Province of BC To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message