RE: [cobalt-security] [RaQ3] Easy way to check log files

["Jim Carey" <ozbcoz@xxxxxxxxxxxxxxxx>]

>
> I've seen mention lots of software add-ons for logs checking, IPChains
> etcetera. What I want to know is; is there a program - idiot proof set-up
> that will check the following logs automatically and any others I
> should be
> checking on a regular basis and email me when something out of
> the ordinary
> crops up. Checking manually doesn't bother me too much - I've learnt a lot
> just from this exercise alone - but there must be something that
> can make my
> life a bit more easier and productive :>
>
> What do the hardened users use and recommend?
>

check out logcheck at:

http://www.psionic.com/abacus/logcheck

it will review the logs and email you the results

also worth looking at portsentry at:

http://www.psionic.com/abacus/portsentry

they go well together

cheers

Jim Carey
www.OZbcoz.com discount domain registration
www.iluvoz.com affordable hosting services