James Sparenberg wrote: > > David > > If you find Tripwire a bit much to install you might look at > Snort (from freshmeat) it's a little less of a hassle to install > and is on par with the free version of TripWire. > > James >
Apples and oranges: they are two *completely* different programs. Snort is an NIDS, and tripwire is a current image of your filesystem. Snort (intended purpose) is to show you how the cracker got in but will not stop him/her from getting in (obviously, to stop intrusions is a function of your firewall and related protective measures). Tripwire (intended purpose) will show you where the cracker went and what he/she did on your system. I would never consider running a network connected to the internet without both of these tool installed, configured, and humming along, as well as *ALL* the other elements in place too... BTW there are mandrake rpm's for both snort and tripwire (rpmfind.net). drjung -- J. Craig Woods UNIX/NT Network/System Administration http://www.trismegistus.net/resume.html Character is built upon the debris of despair --Emerson
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
