Comments on: Tripwire Tutorial: Linux Host Based Intrusion Detection System

By: Vasim Memon

Vasim Memon — Fri, 23 Dec 2011 11:58:50 +0000

Hello Brother,
Personally Thanks for creating such a nice blog.

I am trying to install tripwire on RHEL 5.X but i m getting this error after running below command
prefix=”/opt/tripwire” sysconfdir=”/opt/tripwire/etc” \
path_to_vi=”/bin/vi” path_to_sendmail=”/usr/sbin/sendmail” \
./install/install.sh

Error: –
Error: configuration parameter $TWPOLICY undefined.

Please let me know the solution,
I would be very much thankful to you

By: Dennis

Dennis — Sat, 17 Sep 2011 08:03:59 +0000

great tutorial..thank you very much!

By: Pratik Patel

Pratik Patel — Tue, 05 Apr 2011 10:02:05 +0000

Move / Remove /var/lib/mysql/tech0104_ucc/uc_pms.MYD file & check.

By: alif

alif — Mon, 24 Jan 2011 02:43:01 +0000

Hi,
I tried to install this tripwire. During checkingm i received this error. Would you please advice me on how to solve this. I uninstalled and install again. Same error accoured.

I tun ./tripwire–init as following :

[root@myhost sbin]# ./tripwire –init
Please enter your local passphrase:
Parsing policy file: /opt/tripwire/etc/tw.pol
Generating the database…
*** Processing Unix File System ***
The object: “/backup” is on a different file system…ignoring.
The object: “/misc” is on a different file system…ignoring.
The object: “/net” is on a different file system…ignoring.
The object: “/sys” is on a different file system…ignoring.
### Warning: File system error.
### Filename: /etc/aliases.db
### No such file or directory
### Continuing…
### Warning: File system error.
### Filename: /etc/mail/statistics
### No such file or directory
### Continuing…
### Error: File seek failed.
### Filename: /var/lib/mysql/tech0104_ucc/uc_pms.MYD
### Success./tripwire –update-policy –secure-mode low ../etc/twpol.txt
### Exiting…

However when I issue this command to initialize database :

./tripwire –update-policy –secure-mode low ../etc/twpol.txt

It appear this error :

Parsing policy file: /opt/tripwire/etc/twpol.txt
### Error: File could not be opened.
### Filename: /opt/tripwire/lib/tripwire/myhost.twd
### No such file or directory
### Exiting…

Any advice on this??

By: Snort: 5 Steps to Install and Configure Snort on Linux

Snort: 5 Steps to Install and Configure Snort on Linux — Fri, 06 Aug 2010 06:06:20 +0000

[...] We also discussed earlier about Tripwire (Linux host based intrusion detection system) and Fail2ban (Intrusion prevention [...]

By: Fail2Ban Howto: Block IP Address Using Fail2ban and IPTables

Fail2Ban Howto: Block IP Address Using Fail2ban and IPTables — Fri, 02 Jul 2010 06:04:36 +0000

[...] refer to our earlier article on Tripwire (Linux host based intrusion detection [...]

By: Anonymous

Anonymous — Thu, 19 Nov 2009 01:24:10 +0000

Awesome tutorial!! Thanks a lot!!