Månedsarkiv: juli 2004

NTop web interface to show network usage

Udgivet den juli 10, 2004 af mike

See who’s doing what on your network over time with ntop. If you’re looking for real-time network statistics, check out the terrific ntop tool (http://www.ntop.org). It is a full-featured protocol analyzer with a web frontend, complete with SSL and graphing … Læs resten →

Udgivet i Knowledge Base, Networking, Old Base | Skriv en kommentar

graphs with rrd tool

Udgivet den juli 10, 2004 af mike

Use RRDtool to easily generate graphs for just about anything. You may be familiar with graphing bandwidth usage with tools such as MRTG. From a security standpoint it’s useful to graph bandwidth usage, since it can help you spot anomalous … Læs resten →

Udgivet i Knowledge Base, Networking, Old Base | Skriv en kommentar

Use nagios to monitor services

Udgivet den juli 10, 2004 af mike

Use Nagios to keep tabs on your network. Since remote exploits can often crash the service that is being broken into or cause its CPU use to skyrocket, you should monitor the services that are running on your network. Just … Læs resten →

Udgivet i Knowledge Base, Networking, Old Base | Skriv en kommentar

Process accounts freebsd, linux / watch users in details

Udgivet den juli 10, 2004 af mike

Keep a detailed audit trail of what’s being done on your systems. Process accounting allows you to keep detailed logs of every command a user runs, including CPU time and memory used. From a security standpoint, this means the system … Læs resten →

Udgivet i FreeBSD, Knowledge Base, Linux, Networking, Old Base | Skriv en kommentar

Aggregrate logs from remote sites

Udgivet den juli 10, 2004 af mike

Integrate collocated and other remote systems or networks into your central syslog infrastructure. Monitoring the logs of a remote site or just a collocated server can often be overlooked when faced with the task of monitoring activity on your local … Læs resten →

Udgivet i Knowledge Base, Linux, Networking, Old Base | Skriv en kommentar

Automatic log monitor

Udgivet den juli 10, 2004 af mike

Automatically generated log file summaries are fine for keeping abreast of what’s happening with your systems and networks, but if you want to know about events as they happen, you’ll need to look elsewhere. One tool that can help keep … Læs resten →

Udgivet i Knowledge Base, Linux, Networking, Old Base | Skriv en kommentar

Automatic sumarize your logs

Udgivet den juli 10, 2004 af mike

Wade through that haystack of logs to find the proverbial needle. If you’re logging almost every piece of information you can from all services and hosts on your network, no doubt you’re drowning in a sea of information. One way … Læs resten →

Udgivet i Knowledge Base, Linux, Networking, Old Base | Skriv en kommentar

Steer syslog

Udgivet den juli 10, 2004 af mike

Make syslog work harder, and spend less time looking through huge log files. The default syslog installation on many distributions doesn’t do a very good job of filtering classes of information into separate files. If you see a jumble of … Læs resten →

Udgivet i Knowledge Base, Linux, Networking, Old Base | Skriv en kommentar

Run central syslog

Udgivet den juli 10, 2004 af mike

Keep your logs safe from attackers by storing them remotely. Once an intruder has gained entry into one of your systems, how are you to know when or if this has happened? By checking your logs, of course. What if … Læs resten →

Udgivet i Knowledge Base, Linux, Networking, Old Base | Skriv en kommentar

SFS Secure Filesharing on unix

Udgivet den juli 10, 2004 af mike

Use SFS to help secure your remote filesystems. If you are using Unix systems and sharing files on your network, you are most likely using NFS. However, there are a lot of security problems, not only with individual implementations, but … Læs resten →

Udgivet i Knowledge Base, Linux, Networking, Old Base | Skriv en kommentar