Paket: sagan (1.2.0-1.2) [debports]

[ Källkod:  ]

Real-time System & Event Log Monitoring System

Sagan is a multi-threaded, real time system- and event-log monitoring system, but with a twist. Sagan uses a “Snort” like rule set for detecting malicious events happening on your network and/or computer systems. If Sagan detects a potentially bad event, that event can be stored to a Snort database (MySQL/PostgreSQL), send it to a SIEM tool like Prelude, or send an email. Sagan is meant to be used in a ‘centralized’ logging environment, but will work fine as part of a standalone Host IDS system for workstations.

Andra paket besläktade med sagan

• dep: adduser

  add and remove users and groups

• dep: libc6 (>= 2.7)

  GNU C-bibliotek: Delade bibliotek
  också ett virtuellt paket som tillhandahålls av libc6-udeb

• dep: libee0 (>= 0.3.0)

  Event expression library inspired by CEE

• dep: libestr0 (>= 0.1.0)

  Helper functions for handling strings (lib)

• dep: libfastjson4 (>= 0.99.3)

  fast json library for C

• dep: liblognorm5 (>= 0.3.0)

  log normalizing library

• dep: libpcre3

  Old Perl 5 Compatible Regular Expression Library - runtime files

• dep: libyaml-0-2

  Fast YAML 1.1 parser and emitter library

• dep: lsb-base (>= 3.0-6)

  transitional package for Linux Standard Base init script functionality

• dep: sagan-rules

  Real-time System & Event Log Monitoring System [rules]

Hämta sagan

Hämtningar för alla tillgängliga arkitekturer

Arkitektur	Paketstorlek	Installerad storlek	Filer
sparc64 (inofficiell anpassning)	104,2 kbyte	624,0 kbyte	[filförteckning]