Host-based intrusion detection system comparison

As per the Unix philosophy a good HIDS is composed of multipule packages each focusing on a specific aspect.

Package	Year	Ubuntu	CentOS	File	Network	Logs	Notes
OSSEC	2017	No	No	Yes	Yes	Yes
Samhain	2016	Yes	No	Yes	No	Partial
Snort	2015	Yes	No	No	Yes	No
chkrootkit	2017	Yes	No	Yes	No	Partial
rkhunter	2014	Yes	Yes	Yes	No	No
unhide	2012	Yes	Yes	No	No	No	proc ps compare
Sguil	2017	No	No	No	Yes	No
Logwatch	2016	Yes	Yes	No	No	Yes
aide	2016	Yes	Yes	Yes	No	No
tripwire	2013	Yes	Yes	Yes	No	No