[Gllug] network monitoring

[Mike Brodbelt]

On Tue, 2002-02-19 at 17:58, Paul Brazier wrote:
> What recommendations do people have for free software for monitoring
> remote servers?

Netsaint is one option.
 
> I'm looking at the MRTG webpage ( http://www.mrtg.org ) which looks
> good.
> 
> What I'm after is some thing that can monitor things like bandwidth
> usage etc. and alert me by email if some h4x0rs are using them for ftp
> warez or mail relays or installing rootkits or whatever.
> Hopefully the setup is secure enough that this wouldn't happen in the
> first place but you never know...
> Or just if the server goes down due to power failure or something.

You probably need to stick SNMP on your box, and then monitor the
network traffic - if it falls outside predefined limits, you could set
off an alert. Netsaint has an SNMP plugin that you could use for this.
 
> Could running a SNMP daemon be a security risk in itself?

Read CERT recently :-).

Mike.


-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug