Re: snort or tripwire, which is best?

From: Colin McKinnon (colin.deletethis_at_andthis.mms3.com)
Date: 09/07/05

  • Next message: Stachu 'Dozzie' K.: "Re: snort or tripwire, which is best?" 
    Date: Wed, 07 Sep 2005 09:30:00 +0100

    Stachu 'Dozzie' K. wrote:

    > On 06.09.2005, Proteus <proteus@uselessemail.net> wrote:
    >> For a relative novice using Mandriva linux, which would be better, snort
    >> or tripwire, for me to install and configure on my system? (Desktop PC
    >> used for browsing, news, email, home office, etc., NOT for Apache server,
    >> etc).
    >
    > Neither. You don't need them.
    >

    Is that supposed to be in jest?

    This is exactly the sort of system that needs a host based IDS (i.e.
    tripwire/AIDE/L5...). If Stachu is asking the question then he probably
    does not have a local server for files nor any backup system. If he gets
    rootkitted, his only viable option is to reformat/restore.

    C.

  • Next message: Stachu 'Dozzie' K.: "Re: snort or tripwire, which is best?"
    • Quantcast