Nabou
nabou is a Perl program which can be used to monitor file changes and directories on your system using MD5 checksums. It can also monitor crontab entries, suid files, user accounts, listening TCP/UDP ports, and processes. Nabou stores all data in standard dbm databases. Encrypted databases are supported using RSA public key encryption. Nabou is highly configurable; you can exclude files from being checked, configure which file attributes it should look for, use custom checks, and much more.
| Tags | Security |
|---|---|
| Licenses | GPL |
Recent releases
- 30 Aug 2004 16:49
Changes: This release fixes a design flaw in the asymmetric crypto code. The database encryption scheme used was weak and has been completely replaced by the signature feature using RSA keys. Users using the database protection feature are urged to upgrade to 2.4. Some minor bugs and documentation have been fixed.
- 29 Aug 2004 19:31
Changes: This release adds more encryption fixes, and adds a new feature: signature generation for the ids database entries. The new default hash algorithm is now SHA1, and you can now use more than one hash digest to verify file integrity.
- 26 Aug 2004 20:00
Changes: This version uses now autoconf (configure) for installation which makes things a lot easier for users, it fixes several encryption related bugs, and adds encryption support for all databases (which was not the case until now).
- 27 Feb 2002 18:30
Changes: Scriptlet support was buggy, and has been fixed and tested. The source directory structure has been reorganised, and a makefile has been added for easy installation.
- 09 Feb 2002 15:06
No changes have been submitted for this release.
- All comments
Recent commentsRE: nice
original nabou 1.3 does not run under Perl 5.004_4.
Apply this patch if you are using 5.004_4:
nabou-5_004.patch (http://www.0x49.org/nabou/nabou-5_004.patch).
Use the following command: patch -p0
nice
Very nice package. It incorporates some features I taught
would be really nice in an IDS like permission & ownership
logging. I couldn't get it to work even though I installed
Digest::MD5, i got some Getopt::Long::Configure errors. Does
this require Perl 5.6.0 or something? I'm still using 5.004.
Hmm see my homepage (http://members.xoom.com/miscreants/)
look under ideas, there are some IDS ideas I had and wrote down.