Re: [IPCop-user] Trip Wire

[<ra...@wi...>]

Sitat Richy.fennell@Btinternet.com:

> Anybody ever heard of Tripwire for snort
> I have had a look but i cant quite figure out what it does?

I've never heard of Tripwire for Snort.

Tripwire is a different type of intrusion detection system. It 
makes a signature of your file system, then you run a check 
against that signature periodically to see if anything has 
changed. The idea is that if someone breaks into your system, they 
will replace some files in the process.

There was a good article in Linux Journal some time back, see 
http://www.linuxjournal.com/article.php?sid=4718

Snort works on the traffic coming into your system, Tripwire works 
on the files on your system.


--
Mvh Ragnar Wisløff
------------------
life is a reach. then you gybe.