On Fri, Jun 07, 2002 at 02:21:05PM +0200, D.J. Bolderman wrote:
> Hello ppl,
>
> What are some important things to watch on your debian box ? I'm checking
> logfiles periodically, and run chkrootkit once in a while.
> Are there any parameters in debian that can be turned on for some more
> detaile
On Fri, Jun 07, 2002 at 03:14:23PM +0200, Wouter van Gils wrote:
> Well, you could stop looking at log files, and let logcheck do it for
> you :)
>
> apt-get install logcheck
>
> You might also want a Network Intrusion Detection System --> snort
>
> apt-get install snort
And you can too install
"vdongen" <[EMAIL PROTECTED]> writes:
> You could run logcheck, which instead of reading the logs mails you
> entries that are "unusual" or "attempted break ins"
OK, my thoughts:
a) use syslog-ng to filter firewall events into a separate firewall.log;
b) use fwlogwatch to generate HTML tables of
> Hello ppl,
>
> What are some important things to watch on your debian box ? I'm
> checking
> logfiles periodically, and run chkrootkit once in a while.
> Are there any parameters in debian that can be turned on for some
> more
> detailed logging ?
> Also, if you're using some handy 3rd party too
Well, you could stop looking at log files, and let logcheck do it for
you :)
apt-get install logcheck
You might also want a Network Intrusion Detection System --> snort
apt-get install snort
have fun.
- Wouter
[On 07 Jun, 2002, D.J. Bolderman wrote in "Things to watch on m ..."]
> Hello
Hello ppl,
What are some important things to watch on your debian box ? I'm checking
logfiles periodically, and run chkrootkit once in a while.
Are there any parameters in debian that can be turned on for some more
detailed logging ?
Also, if you're using some handy 3rd party tools, please let me
6 matches
Mail list logo
