b529c1e197
Security Monitoring (NSM). NSM is the collection, analysis, and escalation of indications and warnings to detect and respond to intrusions. NSM tools are used more for network audit and specialized applications than traditional alert-centric "intrusion detection" systems. Want to learn more about Network Security Monitoring (NSM)? Then check out Richard Bejtlich's recently released book, The Tao of Network Security Monitoring: Beyond Intrusion Detection. An excerpt reads: "Network security monitoring (NSM) equips security staff to deal with the inevitable consequences of too few resources and too many responsibilities. NSM collects the data needed to generate better assessment, detection, and response processes--resulting in decreased impact from unauthorized activities." WWW: http://sguil.sourceforge.net/index.php pauls@utdallas.edu PR: ports/104227 Submitted by: Paul Schmehl <pauls at utdallas.edu>
41 lines
1.3 KiB
Text
41 lines
1.3 KiB
Text
*** sguild.conf.orig Tue Mar 28 02:38:13 2006
|
|
--- sguild.conf Tue Mar 28 02:39:47 2006
|
|
***************
|
|
*** 2,6 ****
|
|
|
|
# Path the sguild libs
|
|
! set SGUILD_LIB_PATH ./lib
|
|
|
|
# DEBUG 0=off 1=important stuff 2=everything. Option 2 is VERY chatty.
|
|
--- 2,6 ----
|
|
|
|
# Path the sguild libs
|
|
! set SGUILD_LIB_PATH /usr/local/lib/sguil-server/
|
|
|
|
# DEBUG 0=off 1=important stuff 2=everything. Option 2 is VERY chatty.
|
|
***************
|
|
*** 61,65 ****
|
|
# You MUST have tcpflow installed to get xscripts
|
|
# http://www.circlemud.org/~jelson/software/tcpflow/
|
|
! set TCPFLOW "/usr/bin/tcpflow"
|
|
|
|
# p0f - (C) Michal Zalewski <lcamtuf@gis.net>, William Stearns <wstearns@pobox.com>
|
|
--- 61,65 ----
|
|
# You MUST have tcpflow installed to get xscripts
|
|
# http://www.circlemud.org/~jelson/software/tcpflow/
|
|
! set TCPFLOW "/usr/local/bin/tcpflow"
|
|
|
|
# p0f - (C) Michal Zalewski <lcamtuf@gis.net>, William Stearns <wstearns@pobox.com>
|
|
***************
|
|
*** 72,76 ****
|
|
# Path the the p0f binary. Switches -q and -s <filename> are appended on exec,
|
|
# add any others you may need here.
|
|
! set P0F_PATH "/usr/sbin/p0f"
|
|
|
|
# Email config moved to sguild.email
|
|
--- 72,76 ----
|
|
# Path the the p0f binary. Switches -q and -s <filename> are appended on exec,
|
|
# add any others you may need here.
|
|
! set P0F_PATH "/usr/local/bin/p0f"
|
|
|
|
# Email config moved to sguild.email
|