Knoppix optimised for Network security

**RuffRidr** · 06-09-2003, 03:01 PM

Me and the rest of the team are playing with it now. We're really liking it so far!

Great job t1ck_t0ck!

--RuffRidr

**kamikaze_fish** · 06-17-2003, 05:35 AM

very nice!!! thank you tick tock! I'll be dloading it tomorrow and will let you know what I think. If it is good which it sure looks it, I'm sure I can scrounge a couple of dollars up to donate from the guys at work.

**dragonx** · 06-17-2003, 06:17 AM

I tried the KNOPPIX-STD it works great. I have a re-master at my site called the Penguin Sleuth Kit. You can check it out at:

www.linux-forensics.com

I also posted a validation study that I did on Knoppix. It doesn't look so good for EXT3 and reiser partitions. I have found that mounting read-only on reiser and EXT3 partitions changes the state of the drive. The study is in the publications section of my website and comes on my penguin sleuth CD. There is a link in my download sections that explains what Penguin Sleuth has on it.

**t1ck_t0ck** · 06-17-2003, 10:31 PM

A couple of things.

1) Penquin sleuth kit looks great. can't wait to try it out.

2) the Knoppix validation paper is a must read. Everyone even vaguely interested in doing an autopsy on a Linux box using a Linux OS like STD (or PSK or FIRE or....) should read this paper! [www.linux-forensics.com]

3) www.knopix-std.org is down. Bandwidth exceeded. I'm not surprised. My monthly bandwidth allowance was 16 GB and I was using about 25 GB a DAY :).

In the week that I've had the iso posted I've had nearly 600 downloads. Thanks for the support! I'm glad you're finding it useful.

Please bare wth me. I expect to have a mirror on ibiblio soon as well as sourceforge. I'll also be ditching the ghetto ass ISP I've been using. DON'T EVER USE 5gbhosting.com. (I should have known the pricing was too good to be true. I should have done my research. I know better than this...)

At any rate. The site should be back soon. STD is just getting started.

**dragonx** · 06-17-2003, 11:12 PM

I do have to admit STD is very well organized. I have a quick correction. My Validation Paper is not on My CD yet. I released the first ISO before the paper. I will be including it with next weeks release. I have to do one or two cosmetic changes to Penguin Sleuth (Can you believe i mispelled version) plus add the paper. The paper though is available on my web site for now. The good news is that there has been some work done on figuring out the potential problems and it looks like you will still be able to use the CD's to mount the partitions. You will just have to do it from a command line with certain switches. I am not sure yet on the verdict. I will try to post another paper when the possible solution is figured out. I'll keep you posted.....

Thanks
Ernie Baca
www.linux-forensics.com