[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [hobbit] Suggestions -- New Implementer

To: hobbit (at) hswn.dk
Subject: Re: [hobbit] Suggestions -- New Implementer
From: Rolf Schrittenlocher <Schrittenlocher (at) rz.uni-frankfurt.de>
Date: Wed, 08 Nov 2006 15:46:53 +0100
References: <00c501c70342$b13f0290$6b2fb8a5@txaccess.net>
User-agent: Mozilla Thunderbird 1.0.7 (Windows/20050923)

Hi James,

it depends totally on your OS and the applications running. E.g. for Solaris you might want to check files as who, last and other which hackers like to modify using file and md5 to detect any changes. If an apache is running you might like to see at least x httpd with procs ... And so on.

greetings
rolf

Hello All,

I’ve just moved over my Big Brother monitoring to Hobbit

and I’m looking for suggestions for the files, ports, and

procs category. Are there any default recommendations?

Thanks….James

--
Mit freundlichen Gruessen
Rolf Schrittenlocher

HRZ/BDV, Senckenberganlage 31, 60054 Frankfurt Tel: (49) 69 - 798 28908 Fax: (49) 69 - 798 28817 LBS: lbs-f (at) mlist.uni-frankfurt.de Persoenlich: schritte (at) rz.uni-frankfurt.de

References:
- Suggestions -- New Implementer
  - From: James Wade

Prev by Date: Suggestions -- New Implementer
Next by Date: Re: [hobbit] Hobbit patching (from "HTTP Red")
Previous by thread: Suggestions -- New Implementer
Next by thread: Re: [hobbit] Hobbit patching (from "HTTP Red")
Index(es):
- Date
- Thread