Thank you, I have looked at Nessus however from what I can tell it does not do vulnerability scanning like tara, for instance: checking permissions on .rhosts files, looking for world writable system directories .... I was trying Nessus this morning and it would not compile on FC3, I get error $ make cd nessus && make make[1]: Entering directory `/tmp/nessus-core/nessus' gcc -g -O2 `sh ./cflags` -c xstuff.c xstuff.c:32:21: gtk/gtk.h: No such file or directory In file included from xstuff.c:35: . . . I am trying to work through that though. Thank you again, Jamie Bohr <div>On 8/10/05, Rick Stevens <<a href="mailto:rstevens@vitalstream.com">rstevens@vitalstream.com</a>> wrote:<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> Scot L. Harris wrote: > On Wed, 2005-08-10 at 14:41, Jamie Bohr wrote: > >>I know this is off topic but ... >> >>I am looking to a vulnerability scanner for UNIX. Currently we (the >>company I work for) are using TARA and have come to the conclusion >>that either we need to switch to something else or give TARA a major >>overhaul. Before we went down updating TARA I thought I would see >>what else was out there that could be a direct TARA replacement and >>possibly have more features, central reporting be one of them. >> >>Thank you for you time, >> Jamie Bohr > > > Are you looking for something like nessus? You can get some fairly > comprehensive web based reports from nessus for the systems on your > network. Yes, nessus is good, but beware of false positives from nessus. It may report that you have package foobar-X.Y which has a certain vulnerability, when in fact you have foobar-X.Y-xx.yy where that has been fixed. Nessus doesn't necessarily know about fixes in incremental releases. It looks at the signon message or behaviour of the program and bases its recommendations on that. Just wanted you to be aware of that. You can also use nmap to portscan your systems and see which ports a given machine is listening on. We also use portsentry and snort to watch things go bump on the network, as well as firewalling the kapok out of things. ---------------------------------------------------------------------- - Rick Stevens, Senior Systems Engineer <a href="mailto:rstevens@vitalstream.com"> rstevens@vitalstream.com</a> - - VitalStream, Inc. <a href="http://www.vitalstream.com">http://www.vitalstream.com</a> - - - - Never test for an error condition you don't know how to handle. - ---------------------------------------------------------------------- -- fedora-list mailing list <a href="mailto:fedora-list@redhat.com">fedora-list@redhat.com</a> To unsubscribe: <a href="http://www.redhat.com/mailman/listinfo/fedora-list"> http://www.redhat.com/mailman/listinfo/fedora-list</a> </blockquote></div>