Re: using linux for security at work??
From:Date: 10/23/02
- Next message: M. Felipe: "Re: Iptables help"
- Previous message: Graham Nicholls: "Linux VPN - help!"
- In reply to: lee: "using linux for security at work??"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 23 Oct 2002 08:38:01 -0500
On Wed, 23 Oct 2002 06:50:34 -0500, lee wrote:
> 2 we are having a few weird things going on at the moment with
> something accessing the internet from the LAN and were thinking of
> putting a sniffer next to the firewall to see whats going on. any
> suggestions for software for sniffing and scanning the LAN would be
> good. Again free and pay for
>
You might want to install a copy of ntop (http://www.ntop.org/ntop.html)
to get an overall view of the network activity and then use tcpdump or
ethereal to examine specific connections.
> 3 We have an IDS box on the net already, its unix on a sun something
> or other. Its managed by the US side of the company. We would like
> something of our own for the LAN and Internet, I know of snort, is this
> any good or what other options are there? I have been told that the US
> side are thinking of changing these boxes for snort which is what makes
> me think is good.
>
snort is very, very good as an IDS.
-- The instructions said to use Windows 98 or better, so I installed RedHat.
- Next message: M. Felipe: "Re: Iptables help"
- Previous message: Graham Nicholls: "Linux VPN - help!"
- In reply to: lee: "using linux for security at work??"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|