OSSEC HIDS 2.0 (Default branch) Post: 302293742

Sponsored Content

Special Forums News, Links, Events and Announcements Software Releases - RSS News OSSEC HIDS 2.0 (Default branch) Post 302293742 by Linux Bot on Tuesday 3rd of March 2009 05:50:05 PM

03-03-2009

Registered User

OSSEC HIDS 2.0 (Default branch)

OSSEC HIDS is a host-based intrusion detection system. It performs log analysis, integrity checking, rootkit detection, time-based alerting, and active response. License: GNU General Public License v3 Changes:
This version comes with numerous new features, including support for compiled (C-based) rules, new reporting tools, and agentless monitoring to allow file integrity checking on network devices (including firewalls, routers, etc). It also comes with support for new log formats, including Checkpoint logs, Yum, and a few more.

More...

This User Gave Thanks to Linux Bot For This Post:

Linux Bot

View Public Profile for Linux Bot

Find all posts by Linux Bot

2 More Discussions You Might Find Interesting

1. Cybersecurity

Not being able to run SYSCHEKD in OSSEC local (HIDS)

I am newbee to OSSEC. My objective is to install OSSEC in a ubuntu 10.04 server, configure it and then install rootkits, tamper files and then scan for possible notification and alerts. BUT I tired and then changed few setting in ossec.conf but its nearly similar to default setting. After...

2. Red Hat

Regding OSSEC

FYI... Installed OSSEC server version 2.6 in Cent OS 6.2 and agents are web servers installed in chroot environment. Moreover ossec server and apache (web servers are agents) are installed in separate machines. In ossec.conf file, added below configuration in both server and agent. ...

LEARN ABOUT DEBIAN

exim2dlf

EXIM2DLF.IN(1)						  LogReport's Lire Documentation					    EXIM2DLF.IN(1)

NAME

       exim2dlf - convert exim logfiles to dlf format

SYNOPSIS

       exim2dlf

DESCRIPTION

       exim2dlf converts a Exim logfile to DLF format.	Information on the exim Mail Transport Agent can be found on http://www.exim.org/ .  The
       generic email dlf format is described in email.xml.

EXAMPLES

       To process a log as produced by Exim

	$ exim2dlf < mail.log

       exim2dlf will be rarely used on its own, but is more likely called by lr_log2report:

	$ lr_log2report exim < /var/log/mail.log

SEE ALSO

       exim(1), postfix2dlf(1), sendmail2dlf(1), qmail2dlf(1)

VERSION

       $Id: exim2dlf.in,v 1.24 2009/01/18 10:58:51 wraay Exp $

COPYRIGHT

       Copyright (C) 2000, 2001 Stichting LogReport Foundation LogReport@LogReport.org

       This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by
       the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

       This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of
       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more details.

       You should have received a copy of the GNU General Public License along with this program (see COPYING); if not, check with
       http://www.gnu.org/copyleft/gpl.html.

AUTHOR

       Egon Willighagen <egonw@logreport.org>

Lire 2.1.1							    2009-01-26							    EXIM2DLF.IN(1)