prewikka: Changes to 'refs/tags/prewikka-0.9.14'

[email protected] Wed, 10 Jun 2009 13:24:05 +0200 (CEST)

Newsgroups	gmane.comp.security.ids.prelude.cvs
Message-ID	<[email protected]>

Tag 'prewikka-0.9.14' created by Yoann Vandoorselaere <[email protected]> at 2009-06-08 17:00 +0200

0.9.14
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEABECAAYFAkotNZEACgkQD4LqTXjyBR9KLACfdCfA3fi3igPY3Lb1vTa3g5DA
3+IAnR3F1ld1bCg3DqW2NjuB07e06A+g
=d34f
-----END PGP SIGNATURE-----

Changes since the dawn of time:
Bjoern Weiland (5):
some translation updates
some minor updates
German Translation Updates. Note for yoann:
Some minor Updates
UTF8 Bugfix

Nicolas Delon (375):
Experimental branch for prewikka
begin to do some changes on module handling
Introduce a new abstraction layer uppon templates.
commit c98e4eabcee36fd8bae15fed8a80a3fe53facf2d
commit a90a1fac6b24f89bf942ef37d5fa27e9feaa89e6
commit 034d99f6b2dc5bcc415edfa978add08e3b433d54
New nomenclature of template files.
commit eacd0a1b4dd978be017009762a8362bdb721d140
commit 803b91df2cd7d8519916489fd6049eae6a81ee02
Port mod_alert to the new template scheme.
Create module list menu from loaded module list.
commit d78a85ce00f5990e7b75404be8ff6dc90b89453b
commit 40fc6a8f62e32917dd31e5577c90564fa275bd8a
* lib/functions.js:
commit f6a9834c44f750d39d656dcb4a970b26203f4a7b
* begin writing code alert details
* lib/style.css:
* inc/Frontend.py:
* inc/templates/modules/mod_alert/AlertDetails.py:
* prewikka.conf:
bug fix: remove the last config.py references still in use
Begin to redesign prewikka architecture
missed some files...
cleanup
cleanup, drop inc.layout classes and make the layout job in interface.py
add filtering feature for alert list
add the ability to navigate in the alert list
code cleanup
* inc/modules/mod_alert.py:
fix a bug when selecting the current year
bug fix for the case we have an alert without detect_time or create_time
display alert list from the more recent alert to the latest one
use relative time for minutes and hours value in "current" mode
add delete alert feature
* inc/core.py:
heartbeat view
add missing file
* inc/Request.py:
rename the "core" module in "Core" to avoid conflict with variables of the same name
* inc/Core.py:
remove code that is not used anymore
rename inc into prewikka and make it the root namespace of all classes
(second commit, the tree is consistent now)
update copyrights
cleanup
heartbeats analyze ala piwi
fix a bug introduced in the last commit
code cleanup
the current (active) tab in now clickable
add a sensor header for "per sensor" alerts/heartbeats view
* prewikka/Prelude.py:
* prewikka/modules/main/Views.py:
remove deprecated code
cleanup and improve ActionParameters error handling
create a better abstraction uppon client request
* prewikka/PyTpl.py:
don't use the 'get' method of the dict class because it is python 2.3
s/get/pop/ the previous log message
* prewikka-httpd.py:
implement new auth and permission architecture
introduce filtering mechanism for logs
* prewikka/MyConfigParser.py:
prewikka now uses the Cheetah template system
some bug fixes
fixes
remove files that are now generated
import admin module
cleanup
* prewikka/Interface.py:
change the way data and template interact
* prewikka/modules/main/ActionParameters.py:
(virtual) better support for instances (not working for the moment)
add missing file
top level templates cleanup: avoid code duplication
add missing template
forgot to commit css changes...
finish implementing console admin features for prewikka
* prewikka/Action.py:
* prewikka-httpd.py:
* prewikka/Action.py:
support option destroy
code cleanup and performance improvement for message listing
implement navigation through the message lists
visual improvements
revert back to the old message list fetching method, the new one was buggy
bug fix
bug fix: close a td instead of tr, thanks to Alexandre De Dommelin for pointing
bug fix: bad parameters handling
bug fix: make the inline filters working again
for alert time in message list, display detect time or create time if not present
bug fix: create a default empty menu_extra_content
fix error message position
complete rework of authentication and storage subsystems
add missing files
big cleanup: completely separate data from template code
remove dead code left in the previous commit
use create_time field to retrieve the last alert/heartbeat
display hexadecimal dump for additional data in byte type
big code cleanup
add missing file
add missing file
bug fix
remove dead code
remove dead code
remove dead code
remove reference to dead code
update to Core last changes
move admin module in the content modules directory
remove deprecated documentation
* prewikka/modules/content/admin/admin.py:
display who is currently logged
add current date to dataset
introduce filter edition functionnality
bug fix
remap relation operators for idmef criteria
bug fix: take care of priority
bug fix: remove call to deprecated method
* prewikka/Core.py:
add support for whois and traceroute commands
bug fix
implement heartbeat analyze ala piwi
minor fixes
fix alert/heartbeat deletion bug + minor fixes
display more informations about the alerts in the alert listing view
create a new branch of prewikka for idmefv12 port
add Reference in Classification fields for alert details
buf fixes
make heartbeat listing work again
display analyzer chain in message summary
in alert listing, select alerts depending on create_time and not detect_time
support for timezone selection in three possible timezones:
display timezone for time range
bug fix
escape html characters in hexadecimal dump for binary additional data
fix bad escape code
display classification references in alert summary
display links for reference urls
counters are like incomes, they are better when they are incremented
also display origin with reference name
fix typo
fix a 2nd typo
fix heartbeat listing view
in sensor column of alert list: display analyzer.name instead of analyzer.model
visual fix
show extra informations on sensor listing
add a type to an heartbeat analyze event (in order to hook it in css)
add a completion field to alert info
_get_analyzer_status_from_latest_heartbeat: also return human readable status
fit libprelude admin API changes
user interface improvements
fix heartbeat analyze view
update admin module to the last libprelude default configuration changes
fit last IDMEF changes
bug fixes
big code cleanup/improvement
remove deprecated import
fix paths not up to date
fixes
minor fixes
* prewikka/Auth.py:
fix bad variable name
minor fixes
remember query parameters at login stage in order to redirect
bug fix for sort by create time when results are splited in multiple
display analyzer chain in alert list
fix bad query variable names
escape all idmef values before html rendering
display source/target service name and source/target hostname
visual fix
replace get by post to avoid unexpected behaviour
bug fix, correctly handle parameter list
support for required argument in template
add filter popup when clicking on column title,
do a substr instead of an equal for column filters
replace the "apply" form submitters by on image submitter
catch more errors
remove the unneeded x, y parameters of the query
display an indicator ('*') when a column is filtered
hide old filter popup when a new filter popup is open
bug fix
filter edition page has been heavily modified to use javascript
bug fix for javascript when adding a new criterion in an empty table
add multiple values support for column filters
add more filter types on columns
put source/target/analyzer column filters in a single checkbox for each column
merge libpreludedb-api-rework branch back into trunk
display more informations (users, addresses, ...) / minor
fix bug due to libpreludedb update
sensor alert listing bug fix, rename "analyzer" to avoid conflicting names
* prewikka/Prelude.py:
backport the last pre-0-9-api-cleanup branch bug fixes and detect time display changes
backport pre-0-9-api-cleanup branch last changes ([5005], add basic groupby support
backport last changes from pre-0-9-api-cleanup branch ([5007] display classification/severity/completion
add support for a new "about" view
backport pre-0-9-api-cleanup changeset [5015]:
backport [5017] pre-0-9-api-cleanup changes:
backport [5019] from pre-0-9-api-cleanup:
bug fix (bad pre-0-9-api-cleanup backport)
backport [5036] changes from pre-0-9-api-cleanup
bug fix: forgot to affect using copy the base criteria
display classification references for alerts that have only one alert
bug fix, fix bad variable name
UI fix
UI fix
display address category with all addresses
bug fix for address links (category was included with value)
do not put address category and address value is the same tag
on aggregated alerts, display references only if there is one alert
limit and sort classifications in aggregated mode
bug fix
remove address category
put "not shown" in top of classifications
alert listing navigation improvement
remove count on non-aggregated alerts
fix alert count
fix total
fix bug for expand
classification references fix
bug fix
bug fix
begin charts work with a very basic view
add a global alerts timeline to give an example of plot chart
add directory
display data in a legend
make a barchart for alerts timeline
add top10 targets
put more ticks on the y axis
minor visual improvements
visual fixes
pie colors rework
set bar color to start gradient color
add slice for remaining values
display merged slices in black
bug fix for inline filters
add a new chart for testing purpose
add a chart representing the alert timeline of the last
minor fixes
remove charts related code
backport bugfixes from private
fix several bugs related to NULL aggregated values
fix per sensor alert listing
support for aggregated alerts deletion
add heartbeat/alert deletion on agent view
bug fix
bug fix
inline filter on source/target address
bug fix
fit libprelude API last changes
fix type
fix alert count
fit heartbeat interval changes
change base field
fit changes on ident field
workaround the problem of min/max on time field with libpreludedb
fix bad handling of parameters with multiple values
update user session time on each user request
fit last changes on analyzer
fit last libprelude type->class renaming changes
fix alert (time) order in alert listing
fix wrong variable name
fix alert order bug for expanded alert listing
remove deprecated references to admin module
handle heartbeats without heartbeat-interval field
replace the storage layer by a sql database
remove deprecated config section
fixes
use list indexes when we need them
fix analyzer name for filtering
for message listing per sensor filter on the whole analyzer chain
bug fix: criteria is optional
fix memory leak
add node location/address/name to sensor filters
remove deprecated files
bug fix: forgot to pass self as argument to the overloaded class method
make message listing code (the code related to the table feed) more modular
fix time fields creation
better handling of dynamic section menu
user settings are now accessible by clicking on the login
filter on the last analyzer
user management interface rework
bug fix: method must be POST
fit current password input
fix bad argument handling
commit 49fe6de38b098d944a227df015eaf97fa8d11a14
bug fix
implement filter deletion
display all the analyzers of the given aggregated alert
several fixes for expand
visual fix
fix broken filter links on node name and type columns
use the criteria against the last heartbeat
transfert my copyright to PreludeIDS Technologies
automatically create database it has not been created
UI improvements
capitalize
UI fix
fixes/improvements
cleanup resource directory names
error message fixes
UI tweaks
UI twaeksOB
UI tewe
UI tweak
bug fix (typo)
something somewhere
fix
fix
add manifest
fix
remove deprecated file
fix
fix typo
don't create the database automatically anymore, let the user
* prewikka-database-create.py:
remove the database creation script
bug fix, thanks to toady for pointing this out
display a diagnostic message when database does not seem to have been
* install script improvements:
fix
fix bad keyword
fit last path changes
bug fix
handle correctly empty environnement variable, thanks
rename prewikka-httpd.py in prewikka-httpd
update distribution stuff
fix siteconfig paths
fix bad param name
set the correct permissions for directories
add favicon
fix error page
add credits and a little prewikka description text
remove log parameter from the default conf, we don't want
UI tweak
remove deprecated file for trunk
UI tweak
fit libpreludedb last changes
fit preludedb_init changes
fix information leak
fix
- bug fix: make password changes work (a bad parameter name in the template was used)
remove debug stuff
bug fix: trailing spaces in configuration parameter values were not stripped
display all analyzer addresses in agent, heartbeat listing and heartbeat summary views
update sensor info header to the last changes on analyzer addresses
fit analyzer node_addresses last changes
fix broken filtering links
UI fixes
remove index from path (for external links)
fix bugs and information leaks in auth system
bug fixes:
stupidity...
set default expiration time to 5 minutes
oops, set it to 60 minutes
fix classification filter on alerts view
oops
let the user give the path of the external commands
bug fix: handle impact.severity "info"
fix bad permissions
fix template variable initialization (made cheetah = 0.9.16 crash),
fix bad value
fit gmt offset calculation
bug fix, forgot to cast the float into int
bug fix, bad js function name
bug fix: forgot to update the expiration time of the cookie
fix escaping issue, thanks to Gene Gomez <[email protected]> for pointing this out
fix the unportable way (failed on mac os x) of importing python modules with the
don't display message checkbox and delete button if the user don't
error handling improvement: display exception traceback for
make prewikka.cgi catch exceptions that are raised during the prewikka
- filter edition fixes
minor alert listing fixes
add configuration keywords for conf template
use heartbeat_error_margin config keyword
bug fix #75: when saving a filter, check if a filter with the same name
fix bad handling of empty classifications

Rob Holand (3):
Fix session timeouts
fix escaping of text fields
fix import

Sebastien Tricaud (17):
French traduction pour prewikka
Python messages ready for translation
All (I guess) strings translatables
prewikka is more translated in fr now
new translation strings
few more strings translated
Include new strings translated and fixed a few
new string translated
Add more translated strings and copyright change
Correcting localization for choosing your language in your language :)
More user friendly localization
Add encoding info to fix a warning and merged translations
\u0420\u0443\u0441\u0441\u043a\u0438\u0439 word used instead of Russian
grammar
Translation
grammar fixing grammar fixes ;)
(bugfix): Language selection incorrect for German language, noticed by Bjoern Weiland

Yoann Vandoorselaere (658):
Improve font size.
Some attempt at improving prewikka look.
Make the menu part of prewikka fixed. This is usefull since a lot
Include $menu_extra_content if available in CLassicLayout.tmpl.
Move the naviguation button at the bottom of the menu bar.
Make the login dialog visible again.
Make the top of the Prewikka banner fixed.
Fix authentication page layout.
Move the naviguation control in the left control table. Might move
Lot of design work. Implemented CSS popup for alert list operation.
Hook traceroute/scan source/target. Backend to be done by Nicolas.
cleanup.
Fix some declaration.
some artwork on drawing the username + date.
bug fix.
Force filter form width. Add an example formula.
Copy idmef-v12-work prewikka version to trunk.
Fix timezone control width.
Make the selection checkbox take less width.
Some visual improvments.
Stop using an image gradient.
More fixes...
Some cleanup to the heartbeats details view
More beautification.
Include interface information in source/target.
Missing <thead>.
Show analyzer_time (instead of detect_time) if it's 60 seconds older than create_time.
Consistency work. Cleanup, beautification.
Remove popup for accessing alert details/summary. Directly goes to summary.
UI fixes.
Merge back pre-0-9-api-cleanup into trunk.
Commit first outline of the about page.
UI tweak.
Fix timeline control placement.
s/#end if/#end for/
Layout rework.
Merge back to trunk SettingsDisplay UI changes.
UI tweak
UI tweak.
UI tweak
IE doesn't support colspan=0
Some visual fixes.
colspan=4.
r5663@arwen (orig r5853): nicolas | 2005-03-29 08:31:36 +0200
r5668@arwen (orig r5855): nicolas | 2005-03-29 08:50:46 +0200
r5690@arwen (orig r5876): nicolas | 2005-03-29 17:46:51 +0200
Bump version number to 0.9.0-rc1
r5702@arwen (orig r5886): nicolas | 2005-03-30 23:21:51 +0200
Bump version number to 0.9.0-rc2.
Bump version number to 0.9.0-rc3, updaye NEWS file.
Update.
Update NEWS, bump version number.
Bump version number, update NEWS.
Print message path. Correct entry name.
Link source & destination port to portdb.org. Fix #70.
Merge to trunk.
UI tweak.
Style sheet patch from James A.Overton <[email protected]>, which fixes some problems for Prewikka in
Avoid Authentication Failed message when the user didn't try to authenticate
Implement the ability to address relative IDMEF path.
When grouping by address, match on all address field, not only first. Fix
Fix a bug when expanding an aggregated classification with different severity.
Make mouse pointer behave like it does for links on Alert listing table head
Fix javascript warning.
Removed dead code. Set _filtered to True when a classification is set.
- Fix most issue report by the W3 validator on the alert listing.
More w3 fixes.
Upper the portdb protocol field. Thanks to Gene R Gomez <[email protected]> for
Error beautifications...
More error check when saving the filter.
Error out in case of invalid filter criteria reference.
Remove deprecated code.
Fix variable mixup.
Apply checkbox filter for classification before other classification filter, since
Missing </td>
Missing <tr>.
Escape '&' to '&amp;'.
Fix some duplicated function, and exception on alert without classification.
UI tweak. Implement select all.
More character escape.
Escaping fix.
Patch from Daniel Black <[email protected]> to allow --root prefix installation.
Fix problem with criteria that possibly can contain value with single quote.
Fix install when --root is not specified.
Update NEWS. Bump version number.
Merge from private.
Fix possible exception with filtered classification text.
Better IE rendering in the message listing.
Fix firefox rendering.
More fixes.
More work on better IE rendering.
More IE fixes.
More IE tweak.
XHTML conformance work.
XHTML compliance work.
XHTML conformance work.
XHTML conformance work.
Tweak CSS popup so that they work IE. Make them look better.
More IE tweak.
IE tweak...
Fix IE menu.
New logo.
XHTML conformance.
More conformance work.
IE tweak.
More IE tweak.
Workaround IE checkbox problem.
Fix IE forms.
Fix html.
Fix about page.
More fixes.
Make it work under IE.
Make inline context filter work under IE.
Inline filter tweak.
More inline filter fixes.
More fixes.
commit 0faf685904c0bbbd82d545a977bb3d744ad333b2
commit c2130812f8bc514395e1ae8e80a9ca298036d528
Bugfix.
Fix align.
More compliance.
More XHTML fixes
OOps.
New intermediate URL encoding function.
Add an head_extra_content block. Move AlertListing javascript there.
Provide generic font family. Fix a typo.
Remove some deprecated classification handling code. This fix a bug where the
Bump version number. Update NEWS.
Fix aggregated classification link on list entry that might be expanded. Keep the
Add alert.classification.ident member to the list.
Remove outdated code.
s/analyzis/analysis/. Thanks to Paul daSilva <[email protected]> for pointing
Remove invalid #filter line.
Correct Formula check.
Patch from Rob Holland <[email protected]>, always explicitly convert
Patch from Rob Holland <[email protected]>, implement a new CleanOutput
Patch from Rob Holland <[email protected]>, use CleanOutput filter.
Proper jscript filtering.
Use escape_html_string here.
More fixes.
No need for CleanOutput here.
Use a relative path.
More criteria escaping fix.
Use relative path.
Update NEWS, bump version number.
Escape criteria on the filter value. Use double instead of single quote.
Consistancy: always use double quote in HTML code.
Print analyzer.process.path / classification.ident
Better escaping.
Better error messages.
Always have an empty select box entry.
Correct SNMP, Web, and some process/file filter path.
Add analyzer node location.
Empty space in the default option so that the select box size remain the same.
IE rendering tweak.
Error beautification.
Don't treat empty string as None when reading table row.
Print all analyzer, whether they have an analyzerID or not. More
Fix invalid allbox parameters on delete. Should fix #93.
Remove unused.
Use the same template for user creation/modification. Beautification.
Make the cookie handling subsystem independant from the cookie API being used.
New experimental handler for mod_python.
Slight IE rendering tweak.
Make fieldset_heading a class since it can be used several time in a page.
Missing check-in (this is already in rc9).
Allow configuration entry without space after the ':' separator.
No default pass.
More operator.
Default to case insensitive match for inline filters.
Show target file. Add file path context filtering.
More information in alert summary.
Output beautification.
Missing index.
More summary fixes.
More fixes.
Remove old users infos.
Version bump.
Implement getClientAddr().
Handle None return from getClientPort().
Fix a bug where several item in the same inline filter category would be OR'ed
Increment counter.
Keep object sorted. More intuitive.
Correct javascript.
Fix indentation.
Filter out duplicate value in inlined filter. Make sure that adding a filter
No need for specific index on node name/address filter.
Avoid trailing space at the end of the link.
Remove unused. Avoid overwriting inline filter parameters on classification click.
Minor UI tweak.
Ability to set inline filter on analyzerID.
Make sure we keep aggregation by default, even in per analyzer view.
Avoid overriding other specific analyzer inline filter.
Remove unused aggregated_stuff_value arguments. Cleanup the way we handle aggregated
Oops, missing argument.
Don't default to 'low' severity.
Handle possibly null additional_data.data.
Avoid mangling URL query string on form input.
Remove old stuff
Show correlation alert.
Fix summary link for correlated alert.
Better referer handling with the error view.
Bump version number.
Improve authentication error message.
Formatting tweak. Make sure we don't take all available space.
Remove obsoleted.
Konqueror rendering fixes.
No need to preserve timeline_start as an hidden parameters. This denied further change
Copyright not for potential developers.
Update NEWS, bump version number.
Use service.iana_protocol_name in place of service.protocol if available.
Ability to map iana_protocol_number to protocol name if needed.
Slight rendering tweak.
Bump to 0.9.0
Move protocol mapping function to the utils module. Now resolve the protocol number from the message summary view. Separate port / protocol value, so that we don't end up linking the protocol to portdb if there is no port.
More formatting tweak.
More formatting tweak.
Add iana_protocol_name / iana_protocol_number to filter list.
Implement saving of users parameters.
Fix parameters.
Fix empty value.
Don't propagate _load_save_allowed accross inline filter generated from Prewikka.
Comment display:table-cell for fieldset_page, since it break max-width
Depending on the implementation, time.mktime() might fail with year
Use display:table-cell for FilterEdition template.
Mark CorrelationAlert explicitly in the AlertListing.
Avoid path disclosure on error in prewikka-httpd test server.
Make inline filter mark more visible.
Make parameter saving manual.
apply is now a valid parameter.
Make user preference saving "per view".
Check that the key exist.
Fit normalize prototype change.
Default to load data from database if no argument is provided.
Implement getopt support in prewikka-httpd in order to read command line option.
Fix indentation.
Fix typo, thanks Andreas Rütten <[email protected]>
Prevent browser from focusing back the top of the frame. Should fix #112.
Don't hardcode path to /usr/bin/python, but resort to /usr/bin/env to find it.
Update NEWS, bump version number.
Correctly display dereference of CorrelationAlert.
Add messageid to classification inline filter. Improve display of CorrelationAlert.
More CorrelatedAlert work. Unwide aggregation of CorrelatedAlert first, then
Fix typo.
Always initializer correlated_alert_display.
Don't print un-necessary separator in case proto_str is empty.
Handle case where a criteria is NULL, so that we can correctly grab alert without a criteria set.
Correct analyzer path.
Update NEWS, bump version number.
Fix unlimited timeline option for heartbeat listing.
Move filter saving sanity check to MessageListing class.
Handle the preludeDB "file" setting (for use with SQLite like database).
Sanitize the limit parameter in case it is lower or equal to 0. Fix #118.
Check that limit is available.
Provide the ability to specify a configuration file for Prewikka to use:
More fixes.
Handle None filename argument.
Output cache control information.
Open external link in new windows by default. Add a configuration option
Cleanup external window test.
Explicitly set empty value to empty string, instead of None. Fix #119.
Cast return from getOptionValue() to int. Fix #124.
Instead of printing the raw query string, use the formatted argument
Sanitize mysql.sql so that it can be parsed by the added mysql2sqlite.sh script.
Genetare sqlite.sql automatically.
Update NEWS, bump version number
Don't threat integer with 0 value as None.
Initial support for printing Network centric information in a smart way.
Update for new field name. Support ICMP.
Typo.
More fixes.
Continued fixes.
Keyword change for udp checksum.
Catch tcp_res.
Support ip_off, handle ip_flags as a simple integer for now. Will dichotomize flags later.
typo.
Code cleanup, more network-centric value handling.
Enforce padding on network-centric table.
Stop using deprecated preludedb_sql_get_plugin_error() function.
Complete messageSummary rework. This is work underway.
CSS fixes.
More cleanup / bugfix concerning the new MessageSummary interface.
CorrelationAlert display fixes. Provide more Source Analyzer information.
More cleanup. Include ASCII payload dump.
Rendering improvement.
commit 716b50aa6b74637f1b525ee3f786beeae1a8d59a
Rendering work.
Move IE specific hack to the CSS.
More IE rendering tweak.
More IE fixes.
Avoid using 'table' as a display property since IE seem to fail with it. Use block
Call preludedb_sql_destroy() on delete.
Fix printing of integer 0.
Work on correlation_alert view, from the listing:
If "ignore_atomic_event" CorrelationAlert AdditionalData key is set, ignore the atomic version.
Use non optional data field.
Remove debug spew.
Check that meaning is not nul.
Implement ignoring atomic event in non aggregated view.
Process ignore atomic first. Only use messageid for now (added a FIXME).
r7973@arwen (orig r7953): yoann | 2006-02-27 16:49:07 +0100
Set aggregation to none on correlation alert unwiding link.
Fix CorrelationAlert deletion.
Add missing #end filter
Update About page.
ip_sum, not ip_csum.
Fix typo.
Wrap delete into big transaction.
Cast ident to long.
Fix printing of 0 value.
- Fix aggregation on several fields.
Bump version number, update NEWS.
print currently installed version on libpreludedb requirement error
Fix alert summary exception with alert including file permission (fix #149).
Include patch from Gijs Hollestelle: fix 'Filter on Target' link (fix #148).
Create our own install_scripts target so that #!/usr/bin/env python get expanded for Python scripts (fix #146).
Avoid argument duplication, fix creation of an empty __init__.py file in lib/site-packages (#147)
remove debug spew
Update NEWS, bump version number
Correct libpreludedb version check.
Fix exception with aggregation on IDMEF path that are not string
Summary view support for multiple source/target
Fix invalid use of socket.inet_ntoa() to read ICMP Gateway Address, which is stored as string. Fix #156.
Improve multile source/target rendering
Show multiple source/target in the message listing
Include patch from Stephan Gitz:
Revert CGI installation code for the CGI module which is not yet commited.
Include cgi authentification module for prewikka, contribution from
Bump version number, update NEWS.
Link to future prelude-ids.com port lookup
Link address, node name, and port to Prelude-IDS.com lookup service.
Only link if category is one of ipv4/ipv6 address/network
Typo: ipv4-net -> ipv4-addr
Don't toggle several CSS popup at once
- Allow to define unlimited number of command rather than only the one we know about (fix #134).
Fix and improve address category regexp.
Allow space in configuration parameters name.
Better genericity in command handling. Allow to specify command line
Remove address information on node name, address is sufficient.
Update configuration template for 'command' option handling change.
Make prewikka.external_link_target setting available to all templates.
Use prewikka.external_link_target.
Use the global prewikka.external_link_target setting.
Make host command / Information link available from the Sensor listing.
- Handle multiple listed source/target properly.
Fix HeartbeatListing exception
Use preludedb_delete_(alert|heartbeat)_from_list(). Require libpreludedb 0.9.9. Provide a deletion performance improvement of around 3000%.
Fix invalid removal of "none" type aggregation.
Remove invalid escape sequence
Improve getUrlLink() so that it produce better result on url/non url link.
Separate source/target with <hr />.
Implement code by Francois Harvey <[email protected]> and myself
Update NEWS. Bump version number.
Fix filter interface bug introduced in 0.9.7. Improve error reporting on filter creation
Rename [command] section to [host_commands].
Update NEWS, bump version to 0.9.7.1
Show Prewikka version in the about page. Fix #177.
Fix external process going into zombie state (Fix #178).
Apply modified patch from Alexandre Anriot <[email protected]>: avoid using GNU sed extension.
Save/load user configuration when using CGI authentication mode (fix #181).
Display correct alertident for invalid analyzerid/messageid pair
Correct function name. prewikka-httpd should now log the source address.
Modified patch from Alexandre Anriot <[email protected]>: disable logging to stderr in the default configuration file. Cosmetic changes.
Don't override parent __init__ function. Fix User() class initialization so that it retrieve user configuration. Anonymous authentication was not working anymore before this change.
Only initialize AnonymousAuth() when needed.
Make CGIAuth use Auth.Auth() initialization code.
Threading fixes: avoid modifying the view object since it might be accessed from multiples threads.
Use Python logging facility. Ability to specify different logging handler. Supported handler: stderr, file, smtp, syslog. Fix #113.
Avoid warning if there's no root logger.
Bump version number, update news.
Enable CleanOutput filter.
Activate CleanOutput.
Activate CleanOutput filter
Activate CleanOutput filter
Remove extra CleanOutput definition
Activate CleanOutput filter
Activate CleanOutput filter
Fix typo
Missing escape.
Escape / within javascript attribute. Escape ' in HTML string. Don't automagically escape '\n'
Replace \n with <br/>
Improve escape_html_string performance. Escaping '&' URL separator is going to be done by our Cheetah filter now
Use default Cheetah filter on top of escape_html_string()
Activate CleanOutput filter
No need to reset to default filter here
Activate CleanOutput, and generate all HTML code from the template.
Remove un-needed filter directive.
Activate CleanOutput where needed
Split messagelisting.py code. Make sure any HTML code generation is done within
Only escape IDMEF value when needed.
Only activate CleanOutput where needed.
Small fixes.
Correct Error handling: make sure Retry / Back button action doesn't change.
Use login instead of the User object.
s/user/login/
More logging.
Ability to force escaping on get(). Fix usage of old 'escape' attribute. Only set the default value if the retrieved value is None (don't treat 0 as None).
Dynamic generation of PostgreSQL schema. Correct setup.py so that SQL
Replace '\n' with '<br/> for the Ascii Payload.'
Add user logout warning.
Always use '#end filter', since it is required by Cheetah v2.
Correctly set value_category depending on the IDMEF path. Don't add empty UserID the UserID list (fix #191).
Patch from Paul Robert Marino <[email protected]>, improve database performance by reducing the number of query.
r8783@arwen (orig r8782): yoann | 2007-02-06 13:39:27 +0100
Update NEWS.
Update copyright notice.
Update.
Use messageid to retrieve the message/link, instead of reusing the old criteria.
Show information concerning IDMEFAction, IDMEFWebService and IDMEFSNMPService object.
Iterating over the whole set of database returned value to convert them from IDMEF
No need to make a database count() request anymore: should speed up non aggregated view by about 50%.
Correct handling of empty value for hash key generation. Fix #204.
Cleanup.
Remove obsolete PermissionDeniedError class.
Add a log() function, take the log priority as argument.
Avoid multiple set of _error_back and _error_retry. Remove the failed query information, since the error message itself should be detailed enough.
Exception handling cleanup. Logging is now done through the exception class. Always store the argument in the dataset, if we get redirected to the login screen because the session expired, the login will direct us to the previously requested page. Correctly parse the referer string.
More exception handling fix.
More exception handling fix. Remove obsolete ParametersNormalizer.py module.
Add Permission IDMEF_VIEW for Filter view.
Fix table rows color.
Rework tab/section handling code in Core.py. On error, the error view now provide the section/tabs when possible.
Ability to filter and aggregate on *all* IDMEF path. When the filtered path is an enumeration, automatically provide the list of possible value. Add a combo box for the user to provide the criteria operator to use. Provide an enumeration filter for the type of alert. Provide the ability to do analyzer aggregation. Do not group-by 'address->category', rather try to guess the category when retrieving aggregated messages. Some code refactoring.
Some fixes. Restore CleanOutput
Set filter completion/severity to 'none' if the event doesn't have them.
Use long for timeline parameters.
If no operator is provided, use '='. Check that the operator is valid.
Cleanup.
Import cleanup.
Code cleanup, fix idmef_path_t leak, link to analyzer.node.name filter.
Take the view_name as parameter.
Remove old correlation_alert filter, we can now use inline filter for this task.
Return an iterator from the cached results list when possible.
Remove debugging code.
Handle ToolAlert.
Normalize the hash key, not the value itself.
Allow filtering on messageid.
When using analyzer model, set correct path.
Correct some typos.
More typo correction: s'/#endif/#end if/'.
Preserve the origin parameter. Point to PreludeIDS for references, so that we can handle reference URL changes from a central point.
Don't leek memory on preludedb function exception. Avoid NoneType exception when exiting. Require libpreludedb 0.9.12.
Code cleanup. Don't show all source / target when they reach a predefined limit, instead provide an expansion link. Lot of Correlation/ToolAlert bug fixes.
Get default for max_aggregated_(source|target) at initialization time.
New CorrelationAlerts and ToolAlerts view. Move Heartbeats view to the Agent section. Rename Users to Settings section. Move Filters creation to Settings section.
Fix MissingParameterError exception.
Remove unused.
Support internationalization.
Mark some string for translation.
Missing po template.
r8972@arwen (orig r8962): toady | 2007-03-27 16:43:07 +0200
r8975@arwen (orig r8964): toady | 2007-03-27 17:11:44 +0200
r8978@arwen (orig r8966): toady | 2007-03-27 17:47:42 +0200
Make key argument optional.
Mark string for translation.
Fix a typo.
Add user_settings_display to users classes.
Update
Update.
Remove unused.
Implement thread safe localization in locale.py. Since localization will be enabled on a per user basis, disable automatic/global localization for now.
Include po directory.
Fix unpacking of sorted list.
Update documentation.
Start to update NEWS.
commit dc1202962b156c633d1bc8263149d5933a0644e9
Add missing criteria escape.
Fix exception when deleting a list of Alert, Heartbeat.
Remove python-2.4 dependencies. More data shared between thread.
Make sure the inline filter popup doesn't expand the browser window.
Make inline filter table resize correctly when font-size is increased.
Set width 100% on fieldset_heading table.
Save / Load cleanup. Handle case where getFilter() return None.
Move CorrelationAlert name to a separate table.
Be smart when guessing whether we need to load settings from the database or not.
Remove outdated documentation.
We still require schema version 0.9.1
Update NEWS, bump version number.
Add anguage selection support to Users settings.
Fix version number.
#endif -> #end if
Translate menus.
Move Apply / Save button in a separate row.
Rename locale to localization to avoid module conflict.
Update.
Translation update.
Mark for translation.
Implement and use localization.getDate() in place of strftime().
Update translations.
commit 69585ed043290072ff6bb9cad3f3323edae223ea
s/locale/localization/
Remove debug spew.
Remove duplicate call to setLocale().
List user_settings_modify.
Call _setupDataSet after the view has been loaded.
Improved support for resizing menu. Fix a konqueror small rendering bug with the inline filter.
Correctly set copyright holder.
Mark more string for translation.
Implement N_() translation function, that mark string for translation, but doesn't actually translate the string.
Mark more string for translation. Fixup table header so that there is no wordwrap.
Update.
More update.
Fix a typo.
Brazilian Portuguese translation, by Edelberto Franco Silva<[email protected]>.
Mark more string for translation. Update po(t) files.
Sort language list.
Mark more string for translation.
Support ngettext.
Correct some translated string.
Mark some more string for translation.
Russian translation, by Valentin Bogdanov <[email protected]>
Update.
Fix: analyzerid parameters is a string.
Update Russian translation, by Valentin Bogdanov <[email protected]>
German translation, by Bjoern Weiland <[email protected]>
Convert to UTF-8.
Merge new string marked for translation.
Spanish translation, by Carlo G. Añez M. <[email protected]>
Merge new translation.
Fix some issue with the toggleVisibilityUnique() functions.
Retrieve Analyzer->class.
Implement a new, cleaner and scalable agent view.
Mark string for translation.
Update.
Module path migration: move /trunk/prewikka /prewikka/trunk
Remove debugging stuff.
Mark more string for translation.
Update pgsql.sql to support localization settings.
Use aliasing.
Update prewikka.pot.
French translation improvement.
Prevent exception if the user didn't have the necessary permission to access a specific view. The permission issue is handled later on, when we'll throw a view error.
Fix anonymous authentication.
Better handling of menu related to views permissions.
Add parenthesis around each criteria item, to avoid priority problem.
Translation update.
Fix language selection.
Always use UTF-8 charset.
Translation update.
Translation update.
Handle unknown analyzer status.
Update translations.
Track sqlite.sql.
Update about page support description.
Update translation.
format fix.
Translation update.
Do not save the language on initialization.
Fix menu under anonymous authentication. Translate anonymous username. Add support for a default locale in the configuration file.
Update translation.
Number Analyzer backward, so that it correspond to the analyzer index in the list.
Translation fixes.
Don't save the locale when it is retrieved from the 'default_locale' setting.
If language is None, reset to default. Make the locale apply/save code less confusing.
AnalyzerID might be a string.
Fix exception on UserAdd.
Add missing quote.
Cleanup.
Fix SQLite SQL update script.
Improve version query.
Update translation.
Fix a translation issue.
More translations fixes.
Update NEWS, bump version number.
Don't use getUser() since this will reset the locale.
Patch from Robin Gruyters <[email protected]>: fix regression with the Apache CGI authentication module (fix #228).
Fix ModPython sendHeader.
Update NEWS, bump version number.
Do not exit on Database schema error, rather emit a proper DatabaseSchemaError exception.
Remove debugging code.
In case of database schema error, exiting is not practical since it force the user to read the exception in the web server log. Rather, continue initializing Prewikka and show an error when the user attempt to render the page.
Localize database error.
Update NEWS, bump version number.
Fix database version number.
Update NEWS, bump version number.
Remove auto-generated siteconfig.py from distribution archive.
Handle user deletion in a portable SQL way. Fix #234.
Simplify deleteUser code.
Update NEWS, bump version number.
Whitespace police.
New messageid and analyzerid parameters, allowing to link to a Prewikka alert from an external tool (previously required a database query in order to retrieve the database event id).
Link to alert summary by messageid when possible.
Allow view using RelativeViewParameters without "origin" parameter.
Don't redirect to user listing once the preference are recorded. Fix changing of another user language by an user with PERM_USER_MANAGEMENT. Display target user language rather than current user language.
New 'My account' tabs, under the Settings section (fix #241).
Remove deprecated.
Translate section/tabs name as late as possible.
Update translation.
Typo.
Fix filter load/save/delete issue with translation.
Invert offline/unknown color.
Fix _safeNgettext() (didn't translate anything).
Ability to filter on missing/offline/online/unknown agents. Make more easier to read each agent status in collapsed mode.
Implement an Auto-Refresh system (by Paul Robert Marino <[email protected]> and myself).
Remove debugging code.
Images for the Auto-Refresh functionality.
Localization update.
Small cleanup.
Add decoration to the timeline control table. Improved id/class name.
CSS cleanup.
More CSS cleanup.
Improve inline-filter rendering.
More no cache headers, for IE7.
CSS: fix timeline_unit size / remove duplcated entry.
Revert local schema version change.
Update NEWS, bump version number.
Include patch from Giandomenico De Tullio <[email protected]> that fix a template
Update NEWS, bump version number.
Include JQuery. Port most of the javascript code to make use of JQuery.
Prevent duplicate JQuery inclusion.
Revert local version change.
Whitespace police.
Fix exception if alert analyzer name is empty.
Correct formating.
Update to jquery 1.1.4
Fix a typo making mod_python use the parent method (patch from Helmut Azbest <[email protected]>).
When changing password, we didn't try to match empty 'current password'
Update JQuery to version 1.2
Do not use special effect to show inline filters, since it is still slow under some browser.
Bump to jquery 1.2.1.
Try to report template exception directly to the user.
Whitespace police.
Fix exception when user has no permission.
Whitespace police.
Whitespace police.
Cleanup the Authentication class, so that uper Prewikka layer can act
Document new cgi option, and [auth] entry.
Do not provide user creation/deletion button if backend does not support these operation. Also, use the auth backend to retrieve the user listing.
Propagate the database error message
Provide origin information, so that we do not lose the tabs on submission.
Some cleanup.
Always reset anonymous permission.
Only add the hidden login field in case the username is already known.
Only perform additional database request when using Sensor localtime.
Recognize section even if there are whitespace at the beginning of the line.
Translation update.
Update NEWS, bump version number.
Update to pt_BR translation, by Edelberto Franco Silva <[email protected]>.
Polish translation, by Konrad Kosmowski <[email protected]>.
Correct typo (fix #275), thanks Scott Olihovki <[email protected]>
Move generic message retrieval code from alertlisting to messagelisting,
Implement Prewikka Asynchronous DNS resolution in alert view
Let the user choose the type of sorting (default to time descending,
Fix exception when rendering ToolAlert.
Fix a typo.
Handle portlist and ip_version service fields. Show alert messageid.
Add _threading_local.py from the Python distribution, in order to provide
Resolve module update, use new _threading_local module.
Retrieve the Core() on init.
Whitespace police.
Whitespace police.
Add a global resolve process() function, which handle the case
Use dummy_threading if threading module isn't available.
Do not fail if there is no request. Whitespace police.
Fix double classification escaping (could result in non working link
Whitespace police.
Avoid address resolution if the alert already contain the node.name object.
Update NEWS, bump version number.

weeti (1):
Initial import

_______________________________________________
Prelude-cvslog site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-cvslog