Cool. I am just looking over splunk. Isn't that enough by it's own? or is OSSEC needed to give it raw data? I think these two will take quite some time to understand. Anything simpler out there as well?<div><br></div>
<div>Thanks,</div><div>Bruce<br><br><div class="gmail_quote">On Tue, Apr 13, 2010 at 10:42 AM, --[ UxBoD ]-- <span dir="ltr"><<a href="mailto:uxbod@splatnix.net">uxbod@splatnix.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im">----- Original Message -----<br>
> Speaking of all these attacks, are there any good web managed security<br>
> monitor tools for CentOS out there that can be installed on the system<br>
> so that it can give us a visual of let's multiple failed attempts<br>
> against SSH or HTTPd?<br>
><br>
><br>
> Something nice that is simple and doesn't eat a lot resources and<br>
> spits out everything on the screen?<br>
><br>
><br>
> Thanks,<br>
> Bruce<br>
<br>
</div>How about <a href="http://www.ossec.net" target="_blank">http://www.ossec.net</a> which you could later integrate with <a href="http://www.splunk.com/" target="_blank">http://www.splunk.com/</a>.<br>
<br>
--<br>
Thanks - Phil<br>
<font color="#888888"><br>
--<br>
</font><div><div></div><div class="h5">_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br>
</div></div></blockquote></div><br></div>