From owner-freebsd-questions  Sat Jan 27 22:42:55 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from obsecurity.org (adsl-64-165-226-91.dsl.lsan03.pacbell.net [64.165.226.91])
	by hub.freebsd.org (Postfix) with ESMTP id 6BE3937B400
	for <freebsd-questions@FreeBSD.ORG>; Sat, 27 Jan 2001 22:42:37 -0800 (PST)
Received: by obsecurity.org (Postfix, from userid 1000)
	id D4219BA555; Sat, 27 Jan 2001 22:43:04 -0800 (PST)
Date: Sat, 27 Jan 2001 22:43:02 -0800
From: Kris Kennaway <kris@obsecurity.org>
To: Jason Hunt <jhunt@blaz.homeip.net>
Cc: freebsd-questions@FreeBSD.ORG
Subject: Re: port monitoring program
Message-ID: <20010127224302.B92217@xor.obsecurity.org>
References: <3A73AA67.E5D64B87@blaz.niinet.net>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="WhfpMioaduB5tiZL"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <3A73AA67.E5D64B87@blaz.niinet.net>; from jhunt@blaz.homeip.net on Sat, Jan 27, 2001 at 11:13:11PM -0600
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG


--WhfpMioaduB5tiZL
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

On Sat, Jan 27, 2001 at 11:13:11PM -0600, Jason Hunt wrote:

> I have used portsentry in the past on linux machines, and
> was wondering if there was a better program in freebsd,
> since it will not run in -stcp/udp modes.  I have heard
> of programs like snort, but just wanted some input from
> people who already had a good monitoring program.  Thanks
> for any comments.

IMO, you really can't go past snort (installed from ports) with the
ArachNIDS vision.conf from www.whitehats.com/ids

Kris

--WhfpMioaduB5tiZL
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE6c792Wry0BWjoQKURAiilAJ0V4LruGSESkuo3vxBWq2U8fEStuQCgmxu0
sgbnUa88x3yn3NbG6o774ag=
=rzSG
-----END PGP SIGNATURE-----

--WhfpMioaduB5tiZL--


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message