From owner-freebsd-isp@FreeBSD.ORG Tue Apr 20 12:41:51 2004 Return-Path: Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3A7E816A4CE for ; Tue, 20 Apr 2004 12:41:51 -0700 (PDT) Received: from master4.yvr1.superb.net (master4.yvr1.superb.net [209.90.166.20]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9FE9343D2F for ; Tue, 20 Apr 2004 12:41:50 -0700 (PDT) (envelope-from gbaratto@superb.net) Received: from chivas (fw.yvr1.superb.net [209.90.166.2]) by master4.yvr1.superb.net (8.12.9/8.12.8) with SMTP id i3KJfncw022222 for ; Tue, 20 Apr 2004 12:41:49 -0700 (PDT) Message-ID: <003c01c4270f$82e142d0$9c01a8c0@chivas> From: "Gustavo A. Baratto" To: References: <002401c42706$6d818bb0$9c01a8c0@chivas> <40857940.8@karnaugh.za.net> Date: Tue, 20 Apr 2004 12:41:44 -0700 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1409 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409 Subject: Re: IDS X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Apr 2004 19:41:51 -0000 wow... I didn't know snort did file system checking as well. I will definetely check that out! thanks ----- Original Message ----- From: "Colin Alston" To: "Gustavo A. Baratto" Cc: Sent: Tuesday, April 20, 2004 12:25 PM Subject: Re: IDS > Gustavo A. Baratto wrote: > > > Hi everyone... > > > > We have couple of dozen boxes running freebsd 5.X, but tripwire from ports doesn't compile in 5.X > > > > I wonder what IDS programs people are using these days... Any feedback is really appreciated. > > > > thanks :) > > Snort works wonderfully for me. > > -- > Colin Alston > > Quantum Logic Chicken: > The chicken is distributed probabalistically on all sides of the > road until you observe it on the side of your course. >