Platform:	Linux	File type:	.tar.gz
Updated:	21 April 2013	Size:	2.1 Mb
Developer:	Samhain Labs	License:	GNU GPL
Category:	Intrusion Detection	Downloads:	6778

Samhain is an open source file integrity and host-based intrusion detection system. It can run as a daemon process, and and thus can remember file changes - contrary to a tool that runs from cron, if a file is modified you will get only one report, while subsequent checks of that file will ignore the modification as it is already reported (unless the file is modified again).

Samhain can optionally be used as client/server system to provide centralized monitoring for multiple host. Logging to a (MySQL or PostgreSQL) database is supported.

Shorewall is an iptables based firewall that can be used on a dedicated firewall system, a multi-function masquerade gateway/server or on a standalone Linux system.

The netfilter/iptables project is the Linux 2.4.x / 2.5.x firewalling subsystem.

Dropbear is an SSH 2 server, designed to be usable in small memory environments.

GnuPG stands for GNU Privacy Guard and is GNU's tool for secure communication and data storage.

Snort is a lightweight network intrusion detection system, capable of performing real-time traffic analysis and packet logging on IP networks.