> Tripwire, on the other hand, is a very nice package. easily configured > and tuned, you can certainly add a great deal more intelligence and power > to Tripwire. i have utilized Tripwire at many sites, and give it high > marks. of course, i am not foolish enough to rely upon only *one* IDS at > a given sight... > > you may obtain Tripwire from: > ftp://gumby.dsd.trw.com/pub/security/Tripwire > The canonical ftp location to obtain Tripwire is: ftp://coast.cs.purdue.edu/pub/COAST/tools/tripwire You can also find it via the links in http://www.cs.purdue.edu/coast The latest distribution is 1.2; official releases are signed with my PGP signature -- accept no substitutes! :-) Please note that Tripwire can be licensed for commercial use. Interested parties should contact me to get the name of the person at the university to contact. --spaf (Tripwire's designer)