Quoting Ben Kochie (ben at nerp.net): > RJ11 behind me says "tripwire" I was about to suggest looking at LIDS tho. > Tripwire is for changes to file systems, I guess I should talked about network intrustion. -- Bob Tanner <tanner at real-time.com> | Phone : (952)943-8700 http://www.mn-linux.org | Fax : (952)943-8500 Key fingerprint = 6C E9 51 4F D5 3E 4C 66 62 A9 10 E5 35 85 39 D9