Packet Storm

Samhain File Integrity Checker: Posted Mar 7, 2000; Authored by Rainer Wichmann | Site samhain.sourceforge.net; samhain is a distributed host integrity monitoring system. It consists of monitoring agents running on individual hosts, and a central log server collecting reports from these agents via authenticated TCP/IP connections. On single hosts, it is possible to run a standalone monitoring agent. Currently, agents may monitor the integrity of files and directories, and watch for login/logout events. In addition to forwarding reports to the log server, other logging facilities (e-mail, console, tamper-resistant log file, and syslog) are available. samhain has been tested on Linux, AIX 4.1, HP-UX 10.20, Unixware 7.1.0, and Solaris 2.6.; Changes: A module to watch for login/logout events has been added, deleted files are recognized now, a race condition has been fixed, write permission to critical files is checked more strictly, logging thresholds have a more syslogish syntax, messages are queued for delivery during temporary mail delivery failures and log server downtimes, some minor bugs have been fixed, and a test script has been added for better testing. New DB format.; tags | tool, tcp, intrusion detection; systems | linux, unix, solaris, aix, hpux, unixware; SHA-256 | c4bec6eae7b835c7924032b004d61e27b74c80010826672f9a8458c4206485d7; Download | Favorite | View

Related Files

No related files