[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-users] Security Programs
- Subject: RE: [cobalt-users] Security Programs
- From: Matt Perry <matt@xxxxxxxxxxxxxxx>
- Date: Fri Mar 9 16:28:01 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
On Fri, 9 Mar 2001, Rodolfo Paiz wrote:
> I have the *vague belief* (not sure, not even confident) that TripWire
> does not check packets, but rather takes a snapshot picture of your
> system in a virgin state, and can let you know when (and which) files
> are changed. Thus the idea of TripWire, where you lay a wire and people
> trip over it, setting off your alarms.
Correct. When the hacker rm -rf /var/log/* you'll know it. Unless he
disables TripWire first.
- .\\