Recommend alternative to tripwire?

Posted by CarpeNoctem on Server Fault See other posts from Server Fault or by CarpeNoctem
Published on 2010-05-14T06:45:00Z Indexed on 2010/05/14 6:55 UTC
Read the original article Hit count: 265

Filed under:

ids

|

tripwire

|

intrusion-detection

Looking for a host-based IDS comparable to tripwire. Preferably one that allows centralized management. Right now I use tripwire and though it works management and reporting through a central server would be ideal. I'm looking for recommendations that have actually been used and not just google results. Thanks!

© Server Fault or respective owner

Related posts about ids

T-SQL Picking up active IDs from a comma seperated IDs list

as seen on Stack Overflow - Search for 'Stack Overflow'
I have two tables "Product" having following structure: ProductID,ProductName, IsSaleTypeA, IsSaleTypeB, IsSaleTypeC 1, AAA, N, N, N 2, BBB, N, Y, N -- active 3, CCC, N, N, N 4, DDD, Y, N, N -- active 5, EEE, N, N, N 6, FFF, N, N, N 7, FFE, N, N, N 8, GGG, N, N, N 9, HHH, Y, N, N -- active The… >>> More
error about ACPI _OSC request failed (AE_NOT_FOUND)

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I have ubuntu server 11.10 64 bit I see an error in kernel.log. This error comes out when the server reboot. some port of grep APCI in kernel.log; Dec 5 09:08:51 www kernel: [ 0.588605] pci0000:00: Requesting ACPI _OSC control (0x1d) Dec 5 09:08:51 www kernel: [ 0.588667] pci0000:00: ACPI _OSC… >>> More
CyberSource, ThreatMetrix Partner to Secure IDs

as seen on Internet.com - Search for 'Internet.com'
The electronic payment and risk management services provider has teamed up with security software vendor ThreatMetrix to provide advanced identity protection applications to combat online transaction fraud. >>> More
MultipleHiddenInput doesn't encode properly over POST?

as seen on Stack Overflow - Search for 'Stack Overflow'
The form looks very simple: class MyForm(forms.Form): ids = forms.MultipleChoiceField(widget=forms.MultipleHiddenInput()) def view(request): ... form = MyForm(initial={'ids': [o.id for o in queryset]}) Which gives me the HTML (which looks good enough): <form method="post" action="/foo/bar/"> <input… >>> More
How to drop packets in a custom Intrusion Detection System

as seen on Server Fault - Search for 'Server Fault'
Hi there, I'm trying to build a custom Intrusion Detection and Prevention System (IDS/IPS). I found a great utility named ROPE which can scan the packet payload and drop the packet that doesn't follow the rules, set by a script. This serves my purpose completely, since what I want to do is check… >>> More

Related posts about tripwire

Tripwire help Required

as seen on Server Fault - Search for 'Server Fault'
I have created the policy file in Tripwire and also I have created the rules as well mentioned below: /opt/jboss/server/gis/conf -> $(SEC_CONFIG) +aipm +c+g+a+i+s+t+u+l+M; /usr/local/gtech/eseries/ -> $(SEC_CONFIG) +a+c+g+i+s+t+u+l+M ; After running the integrity check the output should… >>> More
Recommend alternative to tripwire?

as seen on Server Fault - Search for 'Server Fault'
Looking for a host-based IDS comparable to tripwire. Preferably one that allows centralized management. Right now I use tripwire and though it works management and reporting through a central server would be ideal. I'm looking for recommendations that have actually been used and not just google results… >>> More
How do I send mail from Tripwire using SMTP?

as seen on Server Fault - Search for 'Server Fault'
I have just installed tripwire using Ubuntu repos and have gone into the configuration files and changed everything to what I want. When in comes to the options for SMTP mail method and the server and port to use, I am stumped. When I run the test email I get this error message. /usr/sbin/tripwire… >>> More
In Tripwire For Servers policy what is the difference between ACL and permissions?

as seen on Server Fault - Search for 'Server Fault'
I am configuring a policy file for Tripwire For Servers for GNU/Linux (x86) version 4.8.0.167 My system has ext2 and ext3 filesystems. In the policy file the properties include "ACL settings", "permission and file mode bits", and "Flags (additional permissions on object)". What is the difference… >>> More
Should tripwire be entering /proc?

as seen on Server Fault - Search for 'Server Fault'
When initializing the db with tripwire --init it spat out a bunch of errors pertaining to /proc: ### Warning: File system error. ### Filename: /proc/16982/fd/4 ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /proc/16982/fdinfo/4 ### No such file or directory ###… >>> More