BruteForce Plug-In

"Kaplan, Michael A" <[email protected]> Fri, 8 Oct 2010 10:55:06 -0400
Newsgroups gmane.comp.security.ids.prelude.devel
Message-ID <563593148DD9A040B93397F642B3C12558804495B8@rrc-dte-exmb1.dte.telcordia.com>
Folks,

Does anyone know how to trigger the Correlator BruteForce plug-in? What agent should be running (auditd?) and what action should i take (failed ssh attempts)? I have not been able to get this event to trigger.

Thanks.
_______________________________________________
Prelude-devel site list
[email protected]
http://lists.prelude-technologies.com/mailman/listinfo/prelude-devel