Search:

****

Hi Guys,

Quick question about IDS event logging. If I see an "Attacker Address" of 0.0.0.0, is it safe to assume that the source was spoofed?

Also, if I see an "Attacker Address" of 1.2.3.4,...

I'm doing some research on commercial HIDS that will run on Solaris 10 x86 boxes, and so far, I've not had much luck. Have you guys come across any? My guess is that there will be very few. As of...

***Scenario***

I've been tasked to evaluate audit trail (Microsoft/Solaris/RedHat servers) monitoring tools that will allow sys admins to review events in real-to-near-real time. The servers...

Take a look at net-snmp........


http://net-snmp.sourceforge.net/