I have been doing some research for my job looking at a few different packages
regarding intrusion detection and system integrity. I'd like some opinions
regarding some of the packages I have seen and looked at to date. The first is
Snort (
www.snort.org). It is a NIDS program for detecting attacks on a
network. The other is Tripwire (
www.tripwire.com). It is a system integrity
checker that keeps track of changes to files on a system.
Both these programs are multi platform which is what I need for the environment
into which they will be implemented. Does anyone have any pros/cons to these
programs or suggestions for ones they consider better and why. The programs
have to be able to run on Linux (x86, alpha, sparc, etc...), Solaris (x86 and
sparc) and possibly HP-UX.
(text/plain)