On Tuesday 08 June 2004 12:31, Steve Kemp wrote: > On Tue, Jun 08, 2004 at 12:24:26PM -0400, Mark Bucciarelli wrote: > > I like logcheck because it is simple. But it's not packaged for > > Debian, so maybe no-one here uses it. If not, what tool do you > > recommend for intrusion detection? > > Logcheck is a good tool, and can be modified easily. > > It *is* packaged for Debian as you can see from this link: > > http://packages.debian.org/logcheck
That's great, thanks. Do you just use the stock filter files that come with the package? Regards, Mark -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]