It consists of 2 shell scripts: 'recursls' (something like a filtered 'find [] ! -type d') and 'getsums' which produces a md5sum list (see below). It requires another package which may be found here: http://www.zelow.no/floppyfw/download/packages/chksum/chksum.bz2 I run it like this: # ssh root@floppyfw-inside getsums / | sort -k2 > md5sums.2001-12-27 It produces a list of files with their associated md5-checksums: 285b0ecf99c9b71f5884295a2c6e75dd /lib/ld-2.1.3.so 24509abf9763ae7cf273b365a0d8894e /lib/libc-2.1.3.so a17b6dfe8125987fc207320949387a7d /lib/libcrypt-2.1.3.so I do a diff with previous version(s) of the list to check if there have been any changes I'm not aware of. A very simple intrusion detection system. Out of box, it installs in /usr/bin, in which case no pre-*.ini or post-*.ini script is required; if you don't like that, you'll have to write a post-microids.ini script to move it somewhere else. Should you have any comments and/or questions, throw them at me and I'll try answer to the best of my abilities ;-) Enjoy, Cristian