[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: host-based IDS
- To: jason@hcpnet.org
- Subject: Re: host-based IDS
- From: Damien Miller <djm@mindrot.org>
- Date: Mon, 02 Dec 2002 12:42:42 +1100
- Cc: misc@openbsd.org
- References: <33257.65.174.217.59.1038603221.squirrel@www.hcpnet.org>
- User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2) Gecko/20021127
jason@hcpnet.org wrote:
> What are some good host-based IDS' for OpenBSD, I've been looking for
> something like snoopy, that logs all commands that call execve() but
> snoopy does not work on OpenBSD, does anyone know of any host-based IDS'
> for OpenBSD that do that?
Process accounting?
man accton
-d