Phrack Volume Nine, Issue Fifty-Five.
5d9229c09b26727be09ffa3b581f11f6059cabc79950de817e353a434fcee4a8
AAFID is a distributed monitoring and intrusion detection system that employs small stand-alone programs/Agents to perform monitoring functions in the hosts of a network. AAFID uses a hierarchical structure to collect the information produced by each agent, by each host, and by each set of hosts, to be able to detect suspicious activity. This release is a prototype and does not implement full functionality. All modules of the system are written in Perl, and thus it is extremely portable. Although some of the Agents included with AAFID2 perform NIDS functionality, the system as a whole is a host-based intrusion detection system.
0790ec3c2a9d54d716ac14f299330ea2472623d7f4b2419781dfacc1d8ef40bd