Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 05 Mar 2001 19:58:03 -0800
From:      Cy Schubert - ITSD Open Systems Group <Cy.Schubert@uumail.gov.bc.ca>
To:        Rob Simmons <rsimmons@wlcg.com>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: tripwire 
Message-ID:  <200103060358.f263wvE34816@cwsys.cwsent.com>
In-Reply-To: Your message of "Mon, 05 Mar 2001 22:14:15 EST." <Pine.BSF.4.33.0103052211420.15161-100000@mail.wlcg.com> 

next in thread | previous in thread | raw e-mail | index | archive | help
In message <Pine.BSF.4.33.0103052211420.15161-100000@mail.wlcg.com>, 
Rob Simmon
s writes:
> What are the benefits/disadvantages between the two tripwire ports and the
> tripwirish aide port?

Tripwire 1.3.1 fixes a number of bugs found in tripwire 1.2, however 
the licenses are different.  I personally haven't encountered the bugs 
but the people at Tripwiresecurity say that they are there.

The commercial version, Version 2, which Tripwresecurity has made the 
Linux version of the source available, which I might port to FreeBSD as 
well, adds new signatures, improves memory utilisation reducing paging 
and increases the number of files that can be monitored before tripwire 
dies.  It also has an interface to the Tripwire console, which allows a 
central security administrator to monitor 100-200 UNIX and NT systems, 
freeing up UNIX and NT admin staff to do more rewarding work.

I will be discussing the Tripwire version 2 license with someone at 
tripwire tomorrow.

Functionally Aide is smaller and faster.  It supports different 
signatures, however it lacks an interactive mode, e.g. you need to 
specify which files have changed on the command line or rebuild the 
database from scratch.


Regards,                         Phone:  (250)387-8437
Cy Schubert                        Fax:  (250)387-5766
Team Leader, Sun/Alpha Team   Internet:  Cy.Schubert@osg.gov.bc.ca
Open Systems Group, ITSD, ISTA
Province of BC



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200103060358.f263wvE34816>