zentara wrote:
Can anyone suggest me a good and free software for detecting an
intrusion on my server? I was thinking of something that can be configured to send a sound when the attempt of intrusion is made and give a report of all login and attempts of logins on my server.
I just saw this package on freshmeat. It's a perl package that resds logs and plays an mp3 when an event is discovered. Good timing eh?
As I'm sure you're aware, failed root login attempts are logged in /var/log/messages, but I'm not sure about normal user logins. Portscans can be detected with scanlogd, while general intrusion detection can be performed by tripwire (monitors files and checks to see if their contents have changed). Hope that helps, Chris -- __ _ -o)/ / (_)__ __ ____ __ Chris Reeves /\ /__/ / _ / // /\ / / ICQ# 22219005 __v __/_/_//_/_,_/ /_/_\ -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq