From owner-freebsd-security Sun Jun 4 5:45:38 2000 Delivered-To: freebsd-security@freebsd.org Received: from smtp1.interact.se (smtp1.interact.se [193.15.98.9]) by hub.freebsd.org (Postfix) with ESMTP id A7BE237B535 for ; Sun, 4 Jun 2000 05:45:34 -0700 (PDT) (envelope-from je@interact.se) Received: from wolfie.interact.se (je@wolfie.interact.se [193.15.98.202]) by smtp1.interact.se (InterACT Mailer) with ESMTP id OAA07129; Sun, 4 Jun 2000 14:45:19 +0200 (CEST) Date: Sun, 4 Jun 2000 14:43:17 +0200 (CEST) From: Jonas Eriksson X-Sender: je@localhost To: Andrew McNaughton Cc: Robert Gash , freebsd-security@FreeBSD.ORG Subject: Re: Recommendations for alternative tripwire options In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > >On Wed, 31 May 2000, Robert Gash wrote: > >> Has anyone found any decent systems like tripwire available under the GNU >> GPL? > >It's not a replacement for tripwire, but there's a tool out there called >L5, written by hobbit which could provide a good base for such a system, >and is possibly a better place to start if you expect to do a lot of >customization of what gets monitored and what gets done with the change >lists. > >L5 basically provides for producing lists of changes in files and >directories. It doesn't have any of the rules for which areas it should >be monitoring, and it doesn't have code for notifying the administrator >and so forth. > There is alot of tools like Tripwire, just search for tripwire on freshmeat.net http://freshmeat.net/search.php3?query=tripwire -- Jonas Eriksson To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message