ALID(1)

NAME
aLid - Automatic Logging Intrusion Detection system

SYNOPSIS
aLid [OPTIONS]

DESCRIPTION
aLid is a system of Automatic Intrusion Detection and Filtering. It is written in perl, and it is based on the analysis of file log. It allows to entercept attempts of port scanning from attackers and it operates filtering traffic. Moreover it is possible to define a lis of rules and filters, in which aLid will adapt his behaviour. if you would an effective programm, it must installed in a firewall, because it can insert filter's rules too.

OPTIONS

-r  It allows only execution of rules specified in configuration's file. (RULE)

-s  It allows only execution of personalized script of user (SCRIPT)

-f  It allows only execution of stateful filter (STATEFUL_SCRIPT)

-a  It executes all options specified in configuration's file /etc/aLid/aLid.conf. It's default option if you run the program without options.

-h  It visualizes current handbook

EXAMPLES

aLid -rs
    It allows the execution of rules and script.

FILES

/etc/aLid/aLid.conf
    Configuration file of the application.

REQUIREMENT

arpwatch
    Arpwatch - http://www.securityfocus.com/tools/142

DateTime
    DateTime - Perl Library of cpan community

SEE ALSO
sharedTail, aLid.conf

AUTHOR
Andrea Martire (andreamartire@gmail.com)

COPYRIGHT AND LICENSE
Copyright AX 2010 Andrea Martire <andreamartire@gmail.com>. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>. This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law.