[68] in Intrusion Detection Systems

home help back first fref pref prev next nref lref last post

Re: Announcing GABRIEL - Free SATAN Detector (crosspost)

daemon@ATHENA.MIT.EDU (T. Jason Ucker)
Fri Apr 7 14:13:18 1995

From: tju@akira.corp.sgi.com (T. Jason Ucker)
Date: Fri, 7 Apr 1995 06:18:56 -0700
In-Reply-To: jtruitt@iu.net (James O. (Jim) Truitt)
        "Announcing GABRIEL - Free SATAN Detector (crosspost)" (Apr  6,  9:05pm)
To: ids@uow.edu.au
Reply-To: ids@uow.edu.au

Any chance of an IRIX port soon?

Thanks,

-Jason
--
T. Jason Ucker						415.390.3720
Sys Admin/jr Sys Engineer				tju@sgi.com
SGI Direct

On Apr 6,  9:05pm, James O. (Jim) Truitt wrote:
> Subject: Announcing GABRIEL - Free SATAN Detector (crosspost)
> This is a crosspost from the usual security newsgroups, so if you already
> know about it I appologize. I post it here because I hope one of the
> byproducts of this mailing list will be an archive of available packages
> associated with combating intrusion detection.
>
> Jim Truitt
> ------------------------------------------------------------------------------
>
>     Los Altos Technologies, Inc. has released Gabriel, a
>     free SATAN detector.  Gabriel gives the system
>     administrator an early warning of a possible network
>     intrusion by detecting and identifying unauthorized
>     network probing.  Gabriel is complete and ready to run
>     software that does not require Perl or any other
>     public domain programs.
>
>
> Gabriel's highlights:
>
>     Ready to run for Sun Solaris1 and Solaris2 operating systems.
>
>     Full source included.  Perl IS NOT required.
>
>     Test script included to simplify evaluation of Gabriel.
>
>     Built-in mechanism to send real-time alerts via pager, phone
>     call, email, or online displays.
>
>
> Gabriel comes with:
>
>     gabriel_client - Reports to gabriel_server excessive probing
>                      of any host on its network segment.
>
>     gabriel_server - Gathers data from clients and notifies
>                      administrator via email, pager, etc.
>
>     install_gabriel_clients - Single script to install and start
>                               client monitor programs network-wide.
>
>     install_gabriel_server - Installs the server program.
>
>               -----------------------------------------
>               |  Via the World Wide Web:              |
>               |       http://www.lat.com              |
>               |       ftp://ftp.best.com/pub/lat      |
>               |                                       |
>               |  Via FTP:                             |
>               |       ftp.lat.com                     |
>               -----------------------------------------
>
> To join the Gabriel mailing list:
>
>     Send mail to "Majordomo@lat.com" with the command
>     "subscribe gabriel" in the body of the email message.
>
>
> WHAT IS GABRIEL?
>
>     As a public service, Los Altos Technologies, Inc., a provider of
>     Unix security software, has developed and released a free SATAN
>     detector called Gabriel(tm).  Gabriel gives the system
>     administrator an early warning of possible network intrusions by
>     detecting and identifying SATAN's network probing.  Gabriel is a
>     complete and ready to run package that DOES NOT require Perl or
>     any other software or libraries.
>
>
> HOW MUCH DOES IT COST?
>
>     We are providing Gabriel at no charge to our customers or anyone
>     else who wishes to use it, subject to the terms explained in
>     the COPYRIGHT file.
>
>
> WHY DID LOS ALTOS TECHNOLOGIES CREATE GABRIEL?
>
>     We are deeply concerned with network security and the possible
>     negative effects of SATAN and other network probing software.  By
>     combining SATAN with Gabriel, a system administrator can get all the
>     benefits of running authorized SATAN scans without the risks of
>     unauthorized and undetected network probing.
>
>
> HOW IS IT SUPPORTED?  HOW DO I JOIN THE MAILING LIST?
>
>     It is expected that future updates, enhancements and revisions
>     will come from the users' group.  To subscribe to the users'
>     group mailing list, send a message to "majordomo@lat.com" with
>     any subject line, and inside the body of the message include the
>     line "subscribe gabriel".
>
>
> WHERE IS THE LATEST VERSION?
>
>     You can get the latest version via World Wide Web or ftp.
>         http://www.lat.com
>         ftp://ftp.best.com/pub/lat
>
>
> HOW DO I MAKE GABRIEL FROM SOURCE CODE?
>
>     Gabriel includes pre-compiled binaries for Solaris 1.x and
>     Solaris 2.x, so you do not need to build it from source.
>     If you wish to compile it execute "make all" and follow
>     the directions.
>
>
> HOW DO I INSTALL AND EVALUATE GABRIEL?
>
>     Follow the directions in the manual page, gabriel.8.  You can print
>     this file using "troff -man -t gabriel.8 | lpr -t", or just look
>     at gabriel.txt.  Basically, you just run the server install
>     script, and then the client install script.
>
>
> ======================================================================
> Los Altos Technologies, Inc.
> 2111 Grant Rd, Los Altos, CA 94024
> Phone: 415/988-4848
> Fax: 415/988-4860
> Email: info@lat.com
>
>
>-- End of excerpt from James O. (Jim) Truitt



home help back first fref pref prev next nref lref last post