which linux intrusion sys???

[ASmurf]

I have linux 2.2 on my laptop and was wondering which intrusion system I should have...right now I have portsentry, but I've been seeing stuff about snort. Which one is the best or are there others?

 

[ASmurf]

Oh yeah....should I just not use any of these and just use ipchains? I'm kind of a newbie to linux btw.

 

[ASmurf]

bump...some infor plz

 

[Tiger]

I've got portsentry on this machine and it works great. I haven't fully investigated snort but don't intend to change until somebody gives me a good reason.

 

[doug]

I would look at iptables (replacement for ipchains avail in 2.4 kernel) for a firewall. For intrusion detection you could look at tripwire.

 

[BOFH]

LIDS is also good as its a actually ID system, not a firewall.

http://freshmeat.net/projects/linuxintrusiondetectionsystem/