Re: [SLE] Catching a hacker

So, I'd like a system that monitors my Linux and takes actions (like mailing someone) when an attack occurs.

Anyone got any ideas?

'Swatch' is quite good, available from http://www.stanford.edu/~atkins/swatch/ Allows you to filter logs, send mail based on keywords, etc. Assuming you like regex, that is :-) HTH - John