Samhain Daemon Monitor Applet

Copyright © 2001 by Rainer Wichmann

Table of Contents
Samhain Daemon Monitor Applet

Samhain Daemon Monitor Applet

Samhain Daemon Monitor applet displays the state and the console log for the samhain file integrity checking / intrusion detection daemon. The applet uses the System V IPC message queue provided by samhain and polls this queue for new entries. To add this applet to a Panel, right-click on the Panel and choose Panel->Add to panel->Applet->Monitors->Samhain Daemon Monitor.

NoteNote
 

In order for the Samhain Daemon Monitor applet to function correctly, you must have the samhain file integrity checking / intrusion detection daemon, version 1.2 or later, running on your computer. The daemon must have been compiled with the --with-message-queue option.

Usage

The Samhain Daemon Monitor sits in your panel monitoring the status of the samhain file integrity checking / intrusion detection daemon. By left-clicking on the applet you can open a window to view the last lines of the console log.

Whenever an error or a critical/fatal condition occurs, a warning dialogue box will pop up, the console bell will ring, and the colour of the icon will switch from blue to red.

Likewise, whenever a timeout occurs, i.e. no messages have been received from the daemon within a given interval of time, a warning as described above will occur. This is to make sure that you will notice if the daemon has been killed forcibly. Note that you need to configure the daemon with a sufficiently low logging threshold for the console log to get its timestamp messages.

Right-clicking on the applet brings up a menu containing the following items:

  • Properties… — opens the Properties dialog.

  • Reset — will reset the applet to normal state after a warning has been issued. Note that no new warning will occur before the applet is reset.

  • Help — displays this document.

  • About… — shows basic information about Samhain Monitor Applet, including the applet's version and the author's name.

Customization

You can customize Samhain Monitor applet by right-clicking on it and choosing Properties…. This will open the Properties dialog, which allows you to change various settings.

The properties are:

  • Enable popup warnings — If this button is checked, a warning dialogue box will pop up whenever the samhain daemon logs a critical/fatal event.

  • Enable bell warnings — Selecting this button will cause the keyboard bell to be used for warnings.

  • Timeout — Enter the number of seconds to wait between after a log message from the samhain daemon before a timeout warning is issued.

After you have made all the changes you want, click on OK to apply the changes and close the Properties dialog. To cancel the changes and return to previous values, click the Close button.

Known Bugs and Limitations

Panel size flickers for a short moment when starting the applet.

Authors

Samhain Daemon Monitor was written by Rainer Wichmann (). Please send all comments, suggestions, and bug reports to the email address above. You can also use the Samhain User Forum.

This manual was written by Rainer Wichmann (). Please send all comments and suggestions regarding this manual to the email address above.

License

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

A copy of the GNU General Public License is included as an appendix to the GNOME Users Guide. You may also obtain a copy of the GNU General Public License from the Free Software Foundation by visiting their Web site or by writing to

     Free Software Foundation, Inc.
     59 Temple Place - Suite 330
     Boston, MA 02111-1307
     USA