[Q] Intrusion Detection, Log file parsing....

[Donovan J. Edye]

G’Day,

Environment:

-          Debian
-          IPTables based firewall

I would like to accomplish the following:

-          Detect intrusion attempts
-          Have “something” look at syslog and other logs to see if there
are any “funnies” in the logs (not necessarily to do with security, but say
a disk getting full etc.)

Has anyone got any suggestions or pointers?

TIA

-- Donovan
----------------------------------------------------------------------
E-Mail: d.edye at bigfoot.com <mailto:d.edye at bigfoot.com>  Web:
www.edye.wattle.id.au/ <http://www.edye.wattle.id.au/>
“If I throw a stick will you go away?”
“Very funny Scotty. Now beam down my pants!”
----------------------------------------------------------------------
GXExplorer - Freeware Delphi Windows Explorer Replacement
and Delphi Components www.gxexplorer.org
----------------------------------------------------------------------