Return To Message Board
Author Topic:   New Feature
Vlad posted 2/27/06 6:26 PM     Click here to send email to Vlad  click here to send an icq message
Hello, For a log time, I have been using ftimes (baselining and evidence collection tool written in C http://ftimes.sourceforge.net/FTimes/) for doing file system integrity checks on all my servers. I was very happy until recently some of the company's servers were reinstalled and the FS in use were switched form ext3 to xfs. Unfortunately it turned out that ftimes does not support XFS file system, so right now I am looking of a suitable application which I can use for my integrity checks. The most important feature I choose ftimes for was the ability of the tool to generate a snapshot (or a database as it is in fcheck) dumping it on the standart output or in a file and to generate later an integrity modification report based on comparing two such snapshots. This functionality allowed me to build a centralized baseline integrity check system, where I push integrity checks to all servers, collect the produced snapshots and make the actual integrity check from one central location. This gives me not only grate automation but also is more secure comparing of keeping snapshots(databases) on each checked system. Regarding all that I would like to ask if it will possible to add similar functionality in fcheck also. Thank you very much and best regards Vlad


http://www.broadsign.com
M. Gumienny posted 4/19/06 12:18 AM     Click here to send email to M. Gumienny  
FCheck took on a whole new life through the Debian Linux community when they asked be if they could include it in their distribution a couple of years back. They still actively support it and have added even more features since. I have always supported communty efforts that can help build a great tool, so I felt comfortable in this decision. Check out the Debian Linux boards for updates.


http://www.easywebohio.com
Return To Message Board

Back To Intrusion Detection Home Page  | Post New Topic