i have heard many good things about Stalker, though i have not personally worked with this product. Tripwire, on the other hand, is a very nice package. easily configured and tuned, you can certainly add a great deal more intelligence and power to Tripwire. i have utilized Tripwire at many sites, and give it high marks. of course, i am not foolish enough to rely upon only *one* IDS at a given sight... you may obtain Tripwire from: ftp://gumby.dsd.trw.com/pub/security/Tripwire and yes, i did verify this site. 8-) regards, --robert -- o robert owen thomas: unix consultant. cymro ydw i. user scratching post. o o e-mail: Robert.Thomas@pamd.cig.mot.com --or-- robt@cymru.com o o vox: 708.435.7076 fax: 708.435.7360 o o "When I die, I want to go sleeping, like my grandfather... o o Not screaming, like the passengers in his car." o