Re: [Tripwire-announce] what to do??

[Gary E. M. <ge...@re...>]

Yo Ron!

On Wed, 11 Apr 2001, Ron Forrester wrote:

> On Wed, Apr 11, 2001 at 01:24:47PM -0700, Gary E. Miller wrote:
> > with the new tripwire.  The problem we both had is that there is no
> > obvious way to increase the verbosity when you do a simple run
> > like this:
> > 	tripwire -m c

> So something like the following:
>
>    ./tripwire --check --email-report --email-report-level 3

You misunderstand.  I do not want to increase the verbosity of the
email report, I want to increase the verbosity of the report on
stdout.  If I have just been hacked I probably turned off SMTP and
maybe even TCP/IP.  I just need a local report, fast.

> > My main problem with the emailto is that the report is sent as a
> > blank message with an attachment.  This means I have to dowload and
> > read the attachment separately.  Is there really a point to this?
> > Just put in in line.
>
> Hmmm. I get them inline. Are you using a MAILMETHOD of SMTP, or
> SENDMAIL?
The default, SENDMAIL.

I tried changing twcfg.txt and I am back to this dreaded place:

dogbert:/etc/tripwire# twadmin -m F -S site.key twcfg.txt
Please enter your site passphrase:
Incorrect site passphrase.
Please enter your site passphrase:
### Internal Error.
### Terminate Handler called.
### Exiting...


> If you can, use SMTP, in which case you will also need the SMTPHOST
> variable to point to your mail server.
I always run local sendmail, so that just points back to localhost.
If I ever get past "### Internal Error." I will try it.

> If you still have problems with this, let me know.

> A FAQ would be nice. In the meantime, have you read the PDF doc's on
> sourceforge? They are quite good:
>
>    http://prdownloads.sourceforge.net/tripwire/tripwire-2.3.0-docs-pdf.tar.gz

Oh, yeah, I love reading PDFs on Linux routers that have no X. :-)

If PDFs are not good enough for the IETF and RFCs then they are not good
enough for me.  The lack of a portable way to search or edit PDF files
makes them a huge pain. Finding the3 right reader that reads the right
version of the current PDF is also a huge pain.  Give me ASCII, man
pages or html.

RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 20340 Empire Ave, Suite E-3, Bend, OR 97701
	ge...@re...  Tel:+1(541)382-8588 Fax: +1(541)382-8676