Layering an IDS on Linux - prepwork

[Rahul Sundaram]

Arjan van de Ven wrote:

> getting things to dump core somewhere securily, and then do
> (semi)offline processing works quite ok. It would even be nice if there
> was a "a program dumped core. Can I send a backtrace to the distro
> vendor?" program that would allow fedora (and others) to get statistical
> information about where the most common crashes happen.

Are you referring to something like Apport?

http://fedoraproject.org/wiki/Releases/FeatureApport
http://kerneltrap.org/node/14010
http://lkml.org/lkml/2007/7/19/521

Rahul