On Thursday 21 July 2011 09:27:28 Nguyen Vu Hung (VNC) wrote:

Hello all,

Years ago, I used to work with tripwire for system monitoring.

Last time I checked with "yum search tripwire", there is no hit. IIRC, it used to be packed by default on older Redhat distros.

Any suggestion for an alternative of tripwire for my CentOS 5.6?

Cheers,

Previously I have used tripwire but for a few years now I have moved to Samhain - http://www.la-samhna.de/samhain/s_faq.html

You can find an installation howto here: http://www.howtoforge.com/host-based-intrusion-detection-samhain

The tool is quite usefull but sometimes heavy on the central machine, once you go over 100 nodes.