in reply to Snort output; report changes only?

You might want to check out Tripwire, an application that notices when files change. Documentation for it is here.

I have not used it myself - and it's not Perl - but it might be what you're looking for, even so.

Replies are listed 'Best First'.
Re: Re: Snort
by satanklawz (Beadle) on Jan 16, 2002 at 05:37 UTC
    Heheh, well, that isnt what I'm looking for. I do run tripwire, but it doesn't do IDS... it just monitors file changes. This is for an IDS project.
[reply]

In Section Seekers of Perl Wisdom