RE: Scanning tool that will track and report diffs

From: Aditya, ALD [Aditya Lalit Deshmukh] (aditya.deshmukh@online.gateway.technolabs.net)
Date: Fri Feb 27 2004 - 07:02:01 EST


>
> I'm looking for a scanning tool that I can run on a regular basis which
> will: track all results in a database (optional) and report differences
> between scan runs (primary functionality I'm looking for).
>

this looks like exactly like nessus on unix or gfi languard for windows, nessus is freeware and updated frequently but will require unix host to setup, since you have coded in python i think that you are using unix you will find this system very good for baselining and other things

gfi langurard is shareware can be used for one month free of cost but it has the base line freature built in for the you will have to USD$ 99 to use. good but the nessus report | diff | viewer is a more flexible approach.

> Another bit of functionality that I think would be pretty useful is the
> ability to 'base-line' a set of systems and then notify when they
> deviate from this baseline.

maybe something like if you network is fiarly stable ( not dhcp! )

cat "nessus report" | diff | email

-aditya

---------------------------------------------------------------------------
----------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:49 EDT