logcheck or swatch on HPUX 11.11

[Cindy Huang_1]

Hi all,

I need install either swatch or logcheck module on a HPUX 11.11 box. But I could not fine any precompiled package from HP.

Can someone show me where I could find precompiled .depot file, or how to install it from source code?

Thank you in advance!
Cindy Huang

[Uday_S_Ankolekar]

Hp porting centre has a precompiled depot file.
get it from here..
http://hpux.connect.org.uk/hppd/hpux/X11/Demos/swisswatch-0.06/

-USA..

[Pete Randall]

Uday,

That's an xclock tool kit not the swatch that cindy is looking for!


Pete

[Cindy Huang_1]

Thanks a million!!!
I will try it now...

Cindy

[Cindy Huang_1]

Pete is right. I am not looking for clock tool box. I am looking for tool called swatch or logcheck for auto checking /var/log/syslog.log and sending alters to sysadmin.

What is best solustion for this Pete?
We can use someone's script for this, coz it's not going to pass goverment's audittings. Please help.

Cindy

[Pete Randall]

Well, Cindy, I did the same thing Uday did and went to the Porting Center and almost fell into the Swisswatch trap. I then tried a google search for either but didn't find much. I'm also not good at building stuff from scratch (I really must work on that someday), so, as much as I'd like to help, I'm afraid I have no answers for you. Hang in there, one of the Forums gurus can probably help you with build instructions.


Pete

[Uday_S_Ankolekar]

Oops I am sorry Cindy...
Anyhow look for xwatch in same porting centre..

http://hpux.connect.org.uk/hppd/hpux/Gtk/xwatch-0.1.0/

-USA..

[S.Rider]

Cindy, try this spot.
http://sourceforge.net/project/showfiles.php?group_id=80573&package_id=83820&release_id=161261

[S.Rider]

Or if you prefer swatc, look here.

http://www.cert.org/security-improvement/implementations/i042.01.html

[Cindy Huang_1]

Thanks you for your help!!!

I will give xwatch a shot see it works.
btw, Uday, have you ever installed xwatch on your HPUX 11.11 box? Did it work just like swatch on Linux?

Cindy

[Betty Fessler]

used to be ftp.stand.edu/general/security-tools/swatch. Last I found it, it was swatch.sourceforge.net

[Cindy Huang_1]

Hi Betty,

I could not found at either of ftp sites.
Can you show me the completed ftp url again?