[  etch  ] [  etch-m68k  ] [  lenny  ] [  squeeze  ] [  sid  ] [  experimental  ]
[ Source: samhain  ]

Package: samhain (2.5.4-1 and others)

Experimental package

Warning: This package is from the experimental distribution. That means it is likely unstable or buggy, and it may even cause data loss. Please be sure to consult the changelog and other possible documentation before using it.

Data integrity and host intrusion alert system

Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected on memory using steganography.

Main features 

    * Complete integrity check
         + uses cryptographic checksums of files to detect
           modifications,
         + can find rogue SUID executables anywhere on disk, and
    * Centralized monitoring
         + native support for logging to a central server via encrypted
           and authenticated connections
    * Tamper resistance
         + database and configuration files can be signed
         + logfile entries and e-mail reports are signed
         + support for stealth operation

Homepage: http://la-samhna.de/samhain/index.html

Other Packages Related to samhain

  • depends
  • recommends
  • suggests
  • dep: debconf (>= 1.2.9)
    Debian configuration management system
    or debconf-2.0
    Package not available
  • dep: libc6 (>= 2.4) [amd64, mips, mipsel, powerpc]
    GNU C Library: Shared libraries
    also a virtual package provided by libc6-udeb
    dep: libc6 (>= 2.5) [hppa]
    dep: libc6 (>= 2.6) [sparc]
    dep: libc6 (>= 2.7-1) [armel, i386, s390]
  • dep: libc6.1 (>= 2.4) [ia64]
    GNU C Library: Shared libraries
    also a virtual package provided by libc6.1-udeb
    dep: libc6.1 (>= 2.9-3) [alpha]
  • dep: libgcc1 (>= 1:4.3) [armel]
    GCC support library
  • dep: libgcrypt11 (>= 1.4.0) [i386, s390]
    LGPL Crypto library - runtime library
    dep: libgcrypt11 (>= 1.4.2) [not i386, s390]
  • dep: libgnutls26 (>= 2.4.0-0) [i386, s390]
    the GNU TLS library - runtime library
    dep: libgnutls26 (>= 2.5.9-0) [not i386, s390]
  • dep: libprelude2
    Hybrid Intrusion Detection System [ Base library ]
  • dep: zlib1g (>= 1:1.2.0)
    compression library - runtime

Download samhain

Download for all available architectures
Architecture Version Package Size Installed Size Files
alpha 2.5.4-1 1,064.6 kB2476 kB [list of files]
amd64 2.5.4-1 1,065.5 kB2416 kB [list of files]
armel 2.5.4-1 1,083.8 kB2420 kB [list of files]
hppa 2.5.4-1 1,076.3 kB2468 kB [list of files]
i386 2.5.4-1 1,050.9 kB2404 kB [list of files]
ia64 2.5.4-1 1,129.1 kB2776 kB [list of files]
mips 2.5.4-1 1,058.9 kB2488 kB [list of files]
mipsel 2.5.4-1 1,065.2 kB2492 kB [list of files]
powerpc 2.5.4-1 1,066.4 kB2448 kB [list of files]
s390 2.4.6a-1 1,040.7 kB2384 kB [list of files]
sparc 2.5.4-1 1,066.6 kB2456 kB [list of files]