accept no compromises

Register | Login

FilesNewsUsersAuthors

Home Files News About Contact Add New

Showing 1 - 25 of 94

Files from Rainer Wichmann

Samhain File Integrity Checker 3.0.4

Posted May 1, 2012

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: This release fixes inotify-related bugs leading to extraneous "file not found" reports.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | 291f0c36e8b6cf2c24b50f572285b647

Download | Favorite | Comments (0)

Samhain File Integrity Checker 3.0.3

Posted Mar 28, 2012

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: Some bugs that could lead to deadlocks have been fixed, as well as the missing support for O_NOATIME on 64-bit Linux.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | 63c31cb573364a91284b53700f83f383

Download | Favorite | Comments (0)

Samhain File Integrity Checker 3.0.2a

Posted Feb 24, 2012

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: This release fixes a regression that could cause a segfault at startup on systems that do not have inotify.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | 284edfe2aa18f8498041275e09ddb58f

Download | Favorite | Comments (0)

Samhain File Integrity Checker 3.0.1

Posted Dec 7, 2011

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: This release fixes a memory leak in the code for inotify support, as well as a potential deadlock. Bugs in the suid.check and port check modules have been fixed, and compile problems on FreeBSD have been resolved. .

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | 75cb3b50e277373ff3e08278ded7af69

Download | Favorite | Comments (0)

Samhain File Integrity Checker 3.0.0a

Posted Nov 9, 2011

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: This release adds support for inotify on Linux, to enable immediate reports on file changes and reduce I/O load. Debugging output for IPv6 issues is more complete now, and a problem with the combination of prelink support and the suid file check has been fixed

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | 586e901828c3063bebaabeb701f6b5ff

Download | Favorite | Comments (0)

Samhain File Integrity Checker 2.8.6

Posted Sep 20, 2011

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: A bug with the correlation of entries in monitored log files has been fixed, and a deadtime option has been added to avoid repetitive reports. In verbose mode, the policy under which a directory or file is monitored will be reported now. The update function has been enhanced with an option to update only files listed in a text file, and issues with some compile options have been fixed.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | b7fe741ce52db1e3b5f0919ea10a24bb

Download | Favorite | Comments (0)

Samhain File Integrity Checker 2.8.4a

Posted May 12, 2011

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: A regression has been fixed that under certain circumstances would cause samhain to hang when reloading the configuration file. A compile error in the samhain_hide.ko kernel module has been fixed. A contributed patch for samhainadmin.pl has been included that allows you to specify the location of the secret keyring. The (l)stat timeout has been increased to fix spurious timeouts under heavy load. The Apache log file parser has been enhanced to allow the insertion of arbitrary regexes into the format definition. New options allow you to define the port range for the open ports check.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | cebadf8b7bb9da1ff828539a297db68b

Download | Favorite | Comments (0)

Samhain File Integrity Checker 2.8.3a

Posted Mar 23, 2011

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: Samhain now runs lstat/stat calls in a subprocess to avoid getting blocked by hanging NFS mounts. A compile error on Windows/Cygwin as well as minor networking issues have been fixed.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | 2bc57c3dcc487157703a1a5812ca8511

Download | Favorite | Comments (0)

Samhain File Integrity Checker 2.8.2

Posted Feb 16, 2011

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: It is possible now to skip checksumming for files matching user-defined criteria (based on file size, permission, name, and/or file type). Several minor bugs have been fixed.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | 568c51b7edf1578ada95eac08a177f37

Download | Favorite | Comments (0)

Samhain File Integrity Checker 2.8.0

Posted Oct 31, 2010

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: On Linux, it\'s possible now to have samhain report who changed a file (employing the kernel audit system). A module has been added to monitor keys in the Windows registry, and IPv6 networking is supported now.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | 1e68bb8639cf4b2be009b2901dd5d660

Download | Favorite | Comments (0)

Samhain File Integrity Checker 2.7.1

Posted Jun 7, 2010

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: Logging of client reports to prelude can be done by the server now (rather than by the clients themselves). The configuration file parser now accepts C-style quoting for filenames, and the maximum line length has been increased to 16382 characters. Some compile problems have been fixed.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | 3e5eca3315332b494b2b68645bb342d4

Download | Favorite | Comments (0)

Samhain File Integrity Checker 2.7.0

Posted May 5, 2010

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: The login monitoring module has been enhanced to check for anomalies. The kernel integrity check now supports Linux/x86_64, as well as Linux kernels that have /dev/kmem disabled.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | 862c1956de8489a14f02c6ccbcece5ba

Download | Favorite | Comments (0)

Samhain File Integrity Checker 2.6.4

Posted Mar 22, 2010

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: The log monitoring module has been enhanced to allow monitoring the output of shell commands. Some bugs in the log monitoring and kernel checking modules have been fixed.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | e82003912ec06a435b432f0c60f9d2ea

Download | Favorite | Comments (0)

Samhain File Integrity Checker 2.6.3

Posted Mar 10, 2010

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: This release fixes a regression in the email module which caused messages of the highest priority to be queued along with lower priority messages, instead of being mailed immediately.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | d0b25c09bad153304f4aadba4b449c0e

Download | Favorite | Comments (0)

Samhain File Integrity Checker 2.6.1b

Posted Dec 23, 2009

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: On Linux, login/logout tracking now uses inotify. Log file monitoring has been enhanced to support checking for missing heartbeat messages, reporting bursts of repeated messages, and checking for correlated events. UID/GID caching has been improved to reduce the number of lookups, and a compile problem on Cygwin has been fixed.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | 226f775243535456bf852b406ffc4fe1

Download | Favorite | Comments (0)

Samhain File Integrity Checker 2.6.0

Posted Oct 31, 2009

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: Pathname expansion is now performed at each file check, rather than only at startup. The SUID check runs in a separate thread now. Some minor bugs have been fixed.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | 853067c79bedc70b870ad03e91993f72

Download | Favorite | Comments (0)

Samhain File Integrity Checker 2.5.10

Posted Oct 12, 2009

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: This release fixes a race condition that would cause problems with stale file handles under certain conditions.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | 987a29fc83fc76b67511487425054cf1

Download | Favorite | Comments (0)

Samhain File Integrity Checker 2.5.8

Posted Aug 15, 2009

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: This release fixes two bugs in the mailer code: MX resolving would fail sometimes, and a deadlock could occur.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | 4870c9a0fb5fc8faff8b0ec5fe4004de

Download | Favorite | Comments (0)

Samhain File Integrity Checker 2.5.7

Posted Jul 23, 2009

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: A potential deadlock has been fixed along with a configuration reload bug in the \'userfiles\' module. C99-style comments have been removed to improve portability, and the format of the date header of emails has been corrected.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | 0601ac54729e94fc5f989ab7d33bd1d4

Download | Favorite | Comments (0)

Samhain File Integrity Checker 2.5.5

Posted Apr 30, 2009

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | 7376fec2397f37fc1dabcbd77aed56ab

Download | Favorite | Comments (0)

Samhain File Integrity Checker 2.5.4

Posted Mar 5, 2009

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | bbbaf653bbaef5ee71fadb04c71872e0

Download | Favorite | Comments (0)

Samhain File Integrity Checker 2.5.2b

Posted Jan 29, 2009

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | d8d6abf44e3d5b38cd956079658f1088

Download | Favorite | Comments (0)

Samhain File Integrity Checker 2.5.1

Posted Dec 22, 2008

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | b6c4b1302b66e0727b383d855b346938

Download | Favorite | Comments (0)

Samhain File Integrity Checker 2.5.0

Posted Nov 1, 2008

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | c07e8d93d05c66b36e9ee407bbd34a4f

Download | Favorite | Comments (0)

Samhain File Integrity Checker 2.4.6

Posted Sep 3, 2008

Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: Various updates.

tags | tool, tcp, intrusion detection

systems | linux, unix, solaris, aix, hpux, unixware

MD5 | b707b7b7207b4bfa6357fe70795ef57d

Download | Favorite | Comments (0)