[plug] Detecting Apache Attacks...

[garry]

Doing a quick "apt-cache search snort", I got a listing including snort, psad 
and acidlab. Can't vouch for them, but snort is used in the Smoothwall 
firewall so I guess it works..

HTH

Garry

On Thu, 24 Oct 2002 10:31, Trevor Phillips wrote:
> Does anyone know of a comprehensive up-to-date analyser that can look at a
> bunch of webserver logs, and produce a brief report on what attacks were
> attempted against the server?
>
> Preferrably something in a Debian Package for easy install and maintenance.
> ^_^
>
> We keep our servers up to date, and haven't been compromised yet (that we
> know of ^_^;;), but it'd be useful to see what people are TRYING to do to
> our servers. ^_^