prelude-manager: Changes to 'refs/tags/prelude-manager-0.9.15'
[email protected] Fri, 10 Jul 2009 14:05:44 +0200 (CEST)
| Newsgroups | gmane.comp.security.ids.prelude.cvs |
|---|---|
| Message-ID | <[email protected]> |
Tag 'prelude-manager-0.9.15' created by Yoann Vandoorselaere <[email protected]> at 2009-07-10 13:07 +0200 0.9.15 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEABECAAYFAkpXLuoACgkQD4LqTXjyBR/CiQCfYhMixWvfl/Gfr7TMe0lx3zF5 W8cAoIKGUWp2vcXfQD/1cQntBDeGjgB4 =phuw -----END PGP SIGNATURE----- Changes since the dawn of time: Baptiste Malguy (6): * src/db-plugins.c (generate_dynamic_query): modified the ChangeLod according to the previous commit I made about the * src/include/*.h: * src/*-plugins.c (*_plugins_init): * src/decode-plugins.c src/report-plugins.c: * src/pconfig.c (pconfig_init): Krzysztof Zaraska (28): FreeBSD compatibility fixes fixed includes for FreeBSD compatibility Fixed includes debug report plugin added files needed for debug report plugin modifications needed for debug report plugin * configure.in: added AC_CANONICAL_SYSTEM macro to fix autoconf 2.5x mysql configure fixes LIST_HEAD warning fixed in packet-decode.c fixed linker flags for pgsql plugin fix warnings on compilation * src/idmef-message-read.c (source_get): *** empty log message *** language corrections include <arpa/inet.h> in src/idmef-message-read.c new debug plugin fixed compilation warnings fix warnings fixed warnings in debug.c added silent option to debug plugin added analyzer processing in debug plugin fix convertions of milisecond values * plugins/reports/debug/debug.c: print error message when * plugins/db/pgsql/pgsql.c (db_insert): call PQclear() after query *** empty log message *** * plugins/db/pgsql/pgsql.c (db_insert): call PQclear() after query * plugins/reports/xmlmod/xmlmod.c(set_dtd_check): * plugins/decodes/prelude-nids/passive-os-fingerprint.h: Laurent Oudot (8): * created db-inst.sh in order to help the installation process of databases features in the project *** empty log message *** 2002-04-01 Laurent Oudot <[email protected]> *** empty log message *** 2002-04-30 Laurent Oudot <[email protected]> *** empty log message *** *** empty log message *** *** empty log message *** Nicolas Delon (16): * plugins/filters/skeleton/skeleton.c: * plugins/reports/db/db.c: * plugins/reports/db/db.c: * plugins/reports/textmod/textmod.c: * src/idmef-message-scheduler.c: * fix a bad path fix bad default path set the gmt_offset field for analyzer time from create time fit additional data API improvements merge libpreludedb-api-rework branch back into trunk on success the db object own the preludedb_sql_settings object, update db plugin to the last libpreludedb API changes, it should port xmlmod and textmod plugins to the ident (uint64 -> string) changes fix variable declaration fit libpreludedb last changes fit preludedb_init changes Rob Holand (10): missing include missing include missing include add --config to prelude-manager. needs default path fixing fix something I should have known already... whitespace police typedef for config struct pconfig.* -> manager-options.* pconfig_init -> manager_options_init fix type uid_t->gid_t. remove all ancillary groups as well as setgid-ing. fix whitespace-only lines Sebastien Tricaud (1): Config file more explicit with sqlite3 Stephane Loeuillet (3): - manager did not work with mysql v4.0+, fixed add patch author email for michael boman - last argument of mysql_real_connect is INT, not pointer. Sylvain Gil (7): Ougah Bougah Bouarf Bouarf (i'm tired) * Hardcoded the path to log file in prelude-report.conf -> /var/log/prelude prelude-nids plugin was installed in wrong directory * mysql.c: first real mysql calls real tabs * plugins/reports/mysql/mysql.c: sql output code for all funcs, 2002-10-29 Sylvain Gil <[email protected]> Vincent Glaume (1): * src/server-generic.c: Yoann Vandoorselaere (887): Initial revision *** empty log message *** *** empty log message *** * src/prelude-report.c (main): *** empty log message *** * src/ssl.c: pass a config_t as argument to ssl_read_config(). *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** * src/decode-plugins.c (decode_plugins_run): *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** * src/cnx.c (wait_raw_report): * plugins/decodes/prelude-nids/decode.c (plugin_init): * src/server.c (wait_connection): *** empty log message *** *** empty log message *** *** empty log message *** * src/ssl.c (ssl_init_server): use PRELUDE_MANAGER_CONF Missing copyright notice. * src/server-logic.c (child_reader): do not try to handle * src/ssl.c: * src/auth.c (get_account_infos): better error reporting. *** empty log message *** * A lot of modification. Complete API change, use cvs -z4 addCVS: ---------------------------------------------------------------------- *** empty log message *** *** empty log message *** *** empty log message *** * src/server.c (server_read_connection_cb): *** empty log message *** * src/prelude-manager.c (main): *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** * src/server.c: deal with prelude-auth API change. *** empty log message *** *** empty log message *** *** empty log message *** (db_escape): set NULL string pointer to point on an empty string. Forwarding between Manager should work now. *** empty log message *** *** empty log message *** *** empty log message *** * plugins/reports/mysql/mysql.c: quote passed argument. * Kill warning everywhere. * src/Makefile.am (INCLUDES): Include local headers *before* installed *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** * plugins/reports/mysql/mysql.c (print_target): *** empty log message *** *** empty log message *** * src/server.c (server_close_connection_cb): *** empty log message *** * src/pconfig.c: get rid of the config_quiet configuration * src/idmef-func.c (idmef_additional_data_free): add * src/Makefile.am (-DDB_PLUGIN_DIR): * plugins/db/mysql/mysql.c: first cut at a mysql plugin code contained by the old mysql plugins. This code call db plugin * src/idmef-db-output.c: generic layer responssible for outputing *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** * acconfig.h: * configure.ac : * src/server.c: Update to fit server-logic change. * plugins/db/pgsql/pgsql.c (db_insert_id): (plugin_init): *** empty log message *** *** empty log message *** * src/sensor-server.c: new file. *** empty log message *** *** empty log message *** * src/server-generic.c (setup_connection): handle *** empty log message *** * src/idmef-message-read.c (service_get): handle * src/idmef-db-output.c (insert_snmp_service): 2001-12-28 Yoann Vandoorselaere <[email protected]> *** empty log message *** * src/server-generic.c (inet_server_start): add missing (c) header. *** empty log message *** * Added missing CREDITS file, taken from prelude-nids and updated *** empty log message *** * configure.ac: add --enable-profiling *** empty log message *** * src/server-generic.c (unix_server_start): *** empty log message *** * src/sensor-server.c (option_list_to_xml): * src/prelude-manager.c: *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** * src/sensor-server.c (handle_request_ident): *** empty log message *** * src/pconfig.c (set_relay_manager): correct typo. * src/idmef-message-read.c (userid_get): *** empty log message *** * src/include/report.h: fix include. *** empty log message *** *** empty log message *** * src/server-logic.c: *** empty log message *** * src/server-generic.c (close_connection_cb): * src/server-generic.c (handle_connection): *** empty log message *** * src/server-generic.c (handle_connection): * src/idmef-util.c: * plugins/reports/debug/debug.c: * src/ssl.c (ssl_auth_client): (do_ssl_accept): *** empty log message *** * src/server-logic.c: *** empty log message *** (server_logic_process_requests): Add the first set connection before * src/sensor-server.c: * src/sensor-server.c (option_list_to_xml): *** empty log message *** *** empty log message *** *** empty log message *** * src/server-generic.c (handle_plaintext_connection): *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** * src/prelude-manager.c (cleanup): cleanly exit all * Fit libprelude header change. Resolve address when *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** * src/server-logic.c: the continue_processing variable *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** (process_assessment): avoid NULL pointer dereference. *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** * manager-adduser/manager-adduser.c (main): * src/idmef-db-output.c: stop passing pointer to ident. *** empty log message *** *** empty log message *** * src/prelude-manager.c (cleanup): *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** * manager-adduser/ssl-register-client.c (create_manager_key_if_needed): * src/idmef-db-output.c (insert_snmp_service): *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** * plugins/decodes/prelude-nids/decode.c: include * manager-adduser/Makefile.am (DEFS): *** empty log message *** * src/sensor-server.c (handle_request_ident): * src/server-generic.c (server_generic_new): * prelude-manager.conf.in (sensors-srvr): * manager-adduser/ssl-register-client.c (create_manager_key_if_needed): * plugins/db/pgsql/postgres.sql: * src/ssl.c (ssl_close_session): * db-inst.sh: cleanup, fix several bug, simplify, * plugins/decodes/prelude-nids/decode.c (msg_to_packet): * src/db-plugins.c (db_plugins_available): * src/server-generic.c (handle_plaintext_authentication): *** empty log message *** * src/server-logic.c (child_reader): remove wrong lock. * src/server-logic.c (server_logic_process_requests): * plugins/reports/textmod/textmod.c (process_node): *** empty log message *** *** empty log message *** * prelude-manager.conf.in: *** empty log message *** * plugins/decodes/prelude-nids/packet-decode.c: * plugins/decodes/prelude-nids/packet-decode.c: *** empty log message *** *** empty log message *** * src/plugins-util.c (prelude_string_to_hex): * prelude-manager.conf.in (logfile): * plugins/decodes/prelude-nids/packet-decode.c (icmp_dump): * plugins/reports/debug/debug.c: *** empty log message *** * plugins/decodes/prelude-nids/packet-decode.c (ip_dump): *** empty log message *** * src/server-generic.c (server_generic_new): *** empty log message *** * src/pconfig.c (set_relay_manager): *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** Fix daemon mode for Prelude Manager. Prelude-Manager should * src/sensor-server.c (handle_request_ident): removed. * src/server-logic.c (handle_fd_event): *** empty log message *** * src/server-generic.c (handle_plaintext_authentication): * configure.in: * configure.in: save LIBS variable in orig_libs... *** empty log message *** * plugins/db/mysql/mysql.sql: * src/server-generic.c (setup_client_socket): 2002-05-29 Yoann Vandoorselaere <[email protected]> 2002-05-29 Yoann Vandoorselaere <[email protected]> 2002-05-30 Yoann Vandoorselaere <[email protected]> 2002-05-30 Yoann Vandoorselaere <[email protected]> 2002-05-30 Yoann Vandoorselaere <[email protected]> 2002-05-30 Yoann Vandoorselaere <[email protected]> 2002-05-30 Yoann Vandoorselaere <[email protected]> 2002-05-31 Yoann Vandoorselaere <[email protected]> *** empty log message *** 2002-05-31 Yoann Vandoorselaere <[email protected]> 2002-06-01 Yoann Vandoorselaere <[email protected]> 2002-06-02 Yoann Vandoorselaere <[email protected]> *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** 2002-07-22 Yoann Vandoorselaere <[email protected]> 2002-07-23 Yoann Vandoorselaere <[email protected]> 2002-07-23 Yoann Vandoorselaere <[email protected]> 2002-07-25 Yoann Vandoorselaere <[email protected]> 2002-07-29 Yoann Vandoorselaere <[email protected]> 2002-07-29 Yoann Vandoorselaere <[email protected]> warning fix warning fix 2002-07-30 Yoann Vandoorselaere <[email protected]> *** empty log message *** resync with prelude-manager-0-8 sync with prelude-manager-0-8 slight change... 2002-08-16 Yoann Vandoorselaere <[email protected]> cleanup 2002-08-26 Yoann Vandoorselaere <[email protected]> *** empty log message *** Sync with prelude-manager-0-8 *** empty log message *** 2002-08-29 Yoann Vandoorselaere <[email protected]> *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** 2002-10-25 Sylvain Gil <[email protected]> 2002-11-11 Yoann Vandoorselaere <[email protected]> *** empty log message *** 2002-11-12 Yoann Vandoorselaere <[email protected]> *** empty log message *** *** empty log message *** 2002-11-14 Yoann Vandoorselaere <[email protected]> *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** db-work merge in progress *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** *** empty log message *** * src/server-generic.c (handle_connection): * manager-adduser/manager-adduser.c (handle_plaintext_account_creation): * plugins/decodes/prelude-nids/decode.c (decode_message): * plugins/decodes/prelude-nids/decode.c: * src/prelude-manager.c (main): * src/server-generic.c (setup_client_socket): * plugins/reports/db/db.c (process_message): *** empty log message *** *** empty log message *** remove invalid section * plugins/decodes/prelude-nids/packet-decode.c (data_dump): * plugins/reports/xmlmod/xmlmod.c (process_additional_data): * plugins/decodes/prelude-nids/packet-decode.c (data_dump): * plugins/decodes/prelude-nids/packet-decode.c (ip_dump): *** empty log message *** revert previous fix for bad string termination. * plugins/reports/textmod/textmod.c (process_data): Re-work idmef-message-scheduler handling of different message priority. Remove deprecated stuff. remove deprecated stuff remove deprecated stuff * idmef-message-scheduler.c: Almost complete IDMEF message scheduler Fix typo pointed out by Sebastien Tricaud <[email protected]> * idmef-message-scheduler.c Fit libprelude IDMEF API change. Some consteness fix in plugin functions. default to zero plugin loaded. We don't know what is compiled * pmsg-to-idmef.c: code moved from idmef-message-scheduler.c: Remove deprecated autoconf file. * dev/prelude/svn/trunk/prelude-manager/plugins/reports/xmlmod/xmlmod.c * filter-plugins.c * dev/prelude/svn/trunk/plugins-instances/prelude-manager/plugins/filters/filter/filter.c * dev/prelude/svn/trunk/plugins-instances/prelude-manager/manager-adduser/manager-adduser.c Merge back plugins-instances change into trunk * prelude-manager/plugins/reports/xmlmod/xmlmod.c * idmef-message-scheduler.c port to new prelude-list.h API DB creation script is now included with libpreludedb * prelude-manager/plugins/reports/xmlmod/xmlmod.c (process_analyzer): * pmsg-to-idmef.c try to simply interaction with the relaying code, move normal relaying out of here. * idmef-message-scheduler.c * pconfig.c: sync with new reverse-relay API usage. * prelude-manager.c: sync with new reverse-relay API usage. * dev/prelude/svn/trunk/prelude-manager/plugins/filters/filter/filter.c * prelude-manager/plugins/reports/relaying/relaying.c: * dev/prelude/svn/trunk/prelude-manager/plugins/decodes/prelude-nids/decode.c Implemented Report Plugins failover. Plugin supporting failover, if failing, Fix short option Fix compilation fit latest libprelude API change * idmef-message-scheduler.c * sensor-server.c: Be less tolerant about what we receive from sensors. fix warning. * idmef-message-scheduler.c * prelude-manager.c Reference the analyzer * report-plugins.c: Use the new prelude_failover_t API. We now benefit * pmsg-to-idmef.c Drop OpenSSL in favor of GnuTLS support. remove deprecated. fix prototype. manager TLS api renaming to avoid confusion with libprelude function. Initialize the IDMEF message scheduler thread after prelude_client_init() Remove deprecated header inclusion - send a TLS alert on error. Fit prelude-getopt-wide API change. We don't need to create a connection for wide opt anymore Fix minor leak Fit latest libprelude API change. More accurate TLS alert. remove unused variable * server-generic.c Free db->host when destroying the db instance. * pmsg-to-idmef.c cleanup default configuration file Fit prelude-plugin API renaming Change the section name in the example to something existing (value Make sure we generate an unique ident for the heartbeat before providing Compile plugins before core for dlpreopening requirement. git-svn-id: file:///home/yoann/SVN/trunk/prelude-manager@4044 09c5ec92-17d4-0310-903a-819935f44dba call AC_LIBTOOL_DLOPEN() Rename plugin init function, so that plugin can be dlpreopened. Activate plugin dlpreopening. Typo correction. Ported debug2 to the latest API change, fixed several bugs in it. Fix make dist. New pthread detection mechanism, more portable, independant from libprelude. Add dlpreopen hook for debug2. Fix format string when printing 64 bits integer on 64 bit system. Fix format string when printing 64 bits integer on 64 bit system. Take care of EAGAIN when relaying the message. Remove hardwired <inttypes.h> dependencies for portability reason. don't check wether the architecture require aligned memory access since Drop the ltdl.h dependencie, use the libprelude provided abstraction. Slight fix for system without ipv6. Fix header inclusion ordering. Use prelude_inet_ntop() instead of inet_ntop() for portability reason. Align arp embedded in_addr structure. check for cc flags availability. check the accept prototype. Support for architecture missing snprintf, vsnprintf, poll. Add libmissing.h to the build. Add missing includes... git-svn-id: file:///home/yoann/SVN/trunk/prelude-manager@4156 09c5ec92-17d4-0310-903a-819935f44dba Implement SIGHUP handling, allowing to restart the manager. Set SIGHUP Fix old stuff that were not commited intentionaly. copy needed m4 files to the m4 directory, remove acinclude.m4. Update gnulib code. Comment inclusion of the db plugin in case of dlpreopening. This break static Use idmef_object_get() in place of deprecated idmef_message_get(). Remove deprecated API usages. remove deprecated dependencie. Add libtool.m4. update call to prelude_client_set_flags(). Update libprelude.m4 Fit IDMEF message read/write API change. Fit prelude-connection-mgr API change. Fix prelude-client-mgr destroy. Use prelude-string instead of idmef-string. Use prelude-string instead of deprecated prelude-strbuf. prelude_client_init() now take a pointer to argc. Update libprelude.m4, use provided LIBPRELUDE_CONFIG_PREFIX variable. Use LIBPRELUDE_CONFIG_PREFIX for config file inclusion. Fix a bug where prelude_wake_up_timer() would never be called Use Diffie Hellman parameters correctly. Implement regeneration Add missing copyright notice. Remove report-infos.[ch] which Include config.h so that 64 bits file offset are used for Manager FIFO. POLLIN and POLLHUP are not mutually exclusive. Check whether POLLIN is set before Try to read as much data as possible. If we get a full message, it does Merge idmef-v12-work change back in trunk. Fix for latest libprelude API change. Print analyzer-name if present. Remove un-necessary header inclusion. Call prelude_client_is_setup_needed() Adapt to latest idmef-xxx-read API change. Remove un-necessary Remove debugging spew. Fix prelude_msg_get() return value check. Use server_generic_log_client() to report error. Take care of option message routing information. Cleanup routing... Send unreachable mesage if needed. Send our analyzerID as well as the authentication result if authentication succeed. Fit libprelude API change. Make relaying and reverse relaying work again. Use a local root for our own options. fit libprelude to_string() API change. Fit libprelude to_string() API change. Remove duplicate plugin subscribtion Update GNUlib code r4603@arwen: yoann | 2005-01-05T12:13:21.368526Z r4610@arwen: yoann | 2005-01-05T14:24:21.712187Z Update for prelude-init change. Handle stdout as well as stderr. Update GNULib code. Don't remove things unless you know what you are doing. Fix broken re-initialization failover, r4873@arwen (orig r4921): yoann | 2005-01-27 02:31:56 +0100 r4875@arwen (orig r4923): yoann | 2005-01-27 02:41:11 +0100 r4876@arwen (orig r4924): yoann | 2005-01-27 03:07:52 +0100 r4878@arwen (orig r4926): yoann | 2005-01-27 03:17:17 +0100 r4882@arwen (orig r4930): nicolas | 2005-01-27 03:35:05 +0100 r4883@arwen (orig r4931): nicolas | 2005-01-27 03:44:03 +0100 r4886@arwen (orig r4934): nicolas | 2005-01-27 06:38:30 +0100 r4892@arwen (orig r4940): yoann | 2005-01-27 23:20:49 +0100 r4915@arwen (orig r4963): yoann | 2005-01-30 11:09:29 +0100 r4928@arwen (orig r4976): yoann | 2005-01-30 18:02:36 +0100 r4929@arwen (orig r4977): yoann | 2005-01-30 18:06:36 +0100 r4930@arwen (orig r4978): yoann | 2005-01-30 18:07:07 +0100 r4931@arwen (orig r4979): yoann | 2005-01-30 18:07:38 +0100 r4932@arwen (orig r4980): yoann | 2005-01-30 18:18:23 +0100 r4947@arwen (orig r4995): nicolas | 2005-02-01 19:56:56 +0100 r4951@arwen (orig r4999): nicolas | 2005-02-01 20:40:25 +0100 r4987@arwen (orig r5035): yoann | 2005-02-07 14:03:10 +0100 r5066@arwen (orig r5114): yoann | 2005-02-14 17:12:56 +0100 r5068@arwen (orig r5116): yoann | 2005-02-14 18:23:34 +0100 r7579@arwen (orig r5126): yoann | 2005-02-15 12:25:37 +0100 r7580@arwen (orig r5127): yoann | 2005-02-15 12:28:23 +0100 r7581@arwen (orig r5128): yoann | 2005-02-15 12:35:30 +0100 r7582@arwen (orig r5129): yoann | 2005-02-15 12:40:46 +0100 r7583@arwen (orig r5130): yoann | 2005-02-15 12:41:54 +0100 r7584@arwen (orig r5131): yoann | 2005-02-15 12:44:49 +0100 r7585@arwen (orig r5132): yoann | 2005-02-15 18:21:21 +0100 r7607@arwen (orig r5152): yoann | 2005-02-16 12:27:31 +0100 r7608@arwen (orig r5153): yoann | 2005-02-16 12:28:44 +0100 r7609@arwen (orig r5154): yoann | 2005-02-16 12:32:53 +0100 r7610@arwen (orig r5155): yoann | 2005-02-16 12:33:48 +0100 r7611@arwen (orig r5156): yoann | 2005-02-16 12:34:51 +0100 r7643@arwen (orig r5188): yoann | 2005-02-16 12:50:25 +0100 Fix crash if listen address is NULL. prelude_msg_write() can now return 0, this is not an error. Fix distcheck. Cleanup. Be more pedantic about client sending us ident and connection type. Invert callback and callback data argument to fit libprelude change. Set low priority queue as the default target. Use prelude_log for debugging. In the read connection callback, always call server_logic_remove_client() (which itself will trigger Implemented certificate_get_peer_analyzerid(), which read the analyzerID from the certificate DN. New --debug option. Remove deprecated handle_declare_ident() and read_ident_message(). Ident is now read Fix a warning. Ooops. Make server_generic_log_client() take a priority argument. When adding a client Fix invalid pointer dereference that we didn't see earlier (needed DEBUG to be set, changed Correct debugging option. idmef_criteria_new_string() -> idmef_criteria_new_from_string(). Fit latest libprelude changes. Fit latest analyzer handling change. Set idmef-criteria-filter priority so that it's always runned last. This is needed so that it Allow loading criteria from a file. Modify help string. Fix for idmef_path_get_name() change. Fix idmef-message-id constant name. Fix for idmef_criteria_match() change. Use prelude_perror() on error return. Ask for IDMEF_WRITE permission. When authenticating, retrieve certificate permission. Remove un-needed arguments to idmef-message-scheduler functions. When creating the connection pool for a reverse relay, supress the PRELUDE_CONNECTION_POOL_FLAGS_GLOBAL_FAILOVER flag. Fix a possible race on manager initialisation. Typo. Don't use the cached prelude_message, since the manager add it's own Rework reverse-relaying completly. We don't use prelude-connection-pool anymore on Improve locking... Add missing unlock. Put back the message in the list if we get eagain. oops. Fix deadlock. Missing unlock. Use @LIBPRELUDE_PTHREAD_CFLAGS@... Update libprelude.m4 Only free the message on last emition.. Fix a race when creating the msgbuf. Improve locking and reduce contention in reverse-relaying layer. Fit last libprelude change. Print option to stderr, make help and config immediate. Remove Copyright transfer from Nicolas Delon, Krzysztof Zaraska, and myself to PreludeIDS Technologies. Add a note saying this file is deprecated... Use svn log. Listen on 127.0.0.1 by default. Update libpreludedb.m4 =========================================================== Remove deprecated stuffs. Move gl_EARLY call immediatly after the CC check. Use standard inet_ntop(). Don't descend docs directory. Update GNUlib code prior release. Remove deprecated prelude-inet.h inclusion. Update mail address. Slight improvement to inet_ntop module. Improve error logging. Remove un-needed error message. Use PRIu64. Only use size integer when absolutly needed. Use PRELUDE_PRI* instead of PRI*. Remove Some plugin might require manager_client to be already initialized, Let prelude_perror() format the string. Print error if any. Use raw open(). Bump version number. Update NEWS file. Update GnuLib code with OpenBSD fix. s/sa_len/slen/ to avoid compile error on IRIX 6.5. Include gnutls.h. Check for GnuTLS directly, handle IRIX pthread mutex initializers Update GnuLib code. Update. Fix libpreludedb m4. Fit plugins system change (version handling / re-entrancy). Implement destroy hook. Provide destroy hook. Fix warning. Implement some hook in the scheduler to interupt processing. Argument to --db parent option is optional. Don't return raw libpreludedb error number. More error reporting through prelude-option buffer. Set class to "Concentrator" Initialize the validation context. Update IDMEF DTD. Allow true/false argument for boolean option. Make boolean option argument optional. - Write DTD error to the same place we output XML. Update. Update NEWS, bump version number. Fix a double free on EAGAIN when processing local option request. Fix prelude-string leak. Don't declare the client to be a reader until we get to the capability message. Bump version number, update NEWS. Make behavior consistant accross different addressing mode. Implement get function Fix recursive analyzer routing. Fix endianess issue. Remove \n from returned error messages. More detailed error message. Fix a typo, better error message. Immediate priority for --version. Set priority for 'Initialized plugin category' message to log debug. set --pidfile to immediate, and --daemon to first. Update libmissing code. Bump version number, update NEWS. Minor fixes Ooops, s/PRIu64/PRELUDE_PRIu64/ Default to listening on localhost instead of UNIX domain socket. Fix leak on locally addressed messages. Cleanup, fix leak on plugin instance destroy. Update NEWS. Bump version number. 64-bit system warning fix. Update GnuLib code. Kill warnings. Detailed error message. GCC4 shutup. Use xmlNewTextChild() instead of xmlNewChild() in place where the Trivial cleanup. Add specific permission error message. Include libmissing.h & config.h everywhere. Correct Textmod printing of usecond. Include libmissing.h / config.h Remove trailing comma. Update GnuLib code, include "strdup", "strcase", "time_r", and "strftime" modules. Remove un-necessary strftime module. Update. Update autogen.sh. INSTALL. Provide ACLOCAL_AMFLAGS. Update NEWS, configure.in. Bump version number. Slight inclusion cleanup. Set close-on-exec flag on client socket. Thanks to Frank van Vliet <[email protected]> Better error reporting, use FD_CLOEXEC directly. Correct setting FD_CLOEXEC flags. Sound like I really need some sleep. And with full featured error message, it's even better. Every connection now has an unique instance ID, that is used for routing message. More close-on-exec work... Update gnulib code. Decrease error check for begnin error. Add minor check for OS that will incorrectly follow symbolink link on Update NEWS, bump version number. Slight naming change. No impact. Change from old port number (5554) to IANA assignated port number (4690). Provide user/group configuration options. Process "group" option first. Take care to re-establish signal handler for older *nix. Version bump. Add missing. Improve error reporting. Include Copyright notice. Make sure not to disable already set flags. Correct preludedb_sql_new error handling. Untabify. ditto. Improved error reporting. Update GnuLib code. Bump to 0.9.0 Set SO_KEEPALIVE on client socket, not server. By popular request, implement the ability to specify multiple listen address. Update template configuration file. Fix a race condition when creating a new queue. Update gnulib code. CLeanup instanceID code. Add missing. Update NEWS, bump version number to 0.9.1. Handle file based database. Load revocation list if any. Check for revoked certificates. Fix a possible crash, if no listen address is specified, but a reverse relay is used. Propagate verbose error. Let the caller print the error, to avoid duplication. Correct prelude_io_close() error handling. Much better error reporting. Remove line size limitation, by using prelude_read_multiline2() With new TLS error handling improvement, no need to filter out for EOF error. On certificate verification failure, close the connection by sending a TLS Remove option conflict with --help. Update gnulib code. Update NEWS, bump version number, require libprelude 0.9.4. Only send alert if there's one queued. Restore old behavior of not erroring out on EOF. Emit a warning if retrieving a saved message from disk fail. error consistancy work. Better error handling. Correct variable name. Make log argument optional. NULL to disable logging, "-" for stdout. Use preludedb_strerror() in place of errbuf. Unlock the mutex in case an error occur while generating DH parameters. Remove deprecated prelude_client_print_setup_error() code. Update NEWS, requirements, version number, gnulib code. Fix a typo. Fix destroy method for an instance where the preludedb initialization failed. Consistency work accross the logfile option. Xmlmod and Textmod now default to stdout. Send an alert to the peer on handshake failure. Improve signal handling, use SA_INTERRUPT if available. logfile option consistency work, implement get. Cosmetic change. When no listen address is specified, bind all address returned by getaddrinfo() When an analyzer have read and write permission to prelude-manager, avoid Use IDMEF_LIST_PREPEND in place of 0. Start work on a normalization plugin. Very simple for now, mostly sanitize Call decode-plugins with an id of 0 when we're done processing the prelude_msg_t. Add @LIBPRELUDEDB_CFLAGS@ to the compilation flags. Fix #138. Fix an issue with system with both v4 and v6 interface, but which doesn't Use prelude_error() for error reporting. Implemented server_generic_remove_client(). Update GnuLib code. Don't return an error from the write callback to the server-logic layer if we Add to the head, not to the tail of the list, since this is the current message Avoid double inclusion. Fix message notification problem due to thread safety issue happening on some architecture. No need to watch at connection 'closing' state in the read_connection_cb() since the last server-logic change. Minor cosmetic change. Make 'reverse-relay' connection non blocking. Fixes so that we destroy the previous connection pool when the --child-managers option is specified several time. Instead of flushing a random amount of message when flushing the failover, rely on server-logic to tell us when to flush. Require libprelude 0.9.7 for normalisation plugin. Make sure we won't close the connection before all data are read. Necessary since Pre-opening support for normalize plugin. Add copyright, libmissing/config headers. Update gnulib code. Missing backslash. Update NEWS, bump version number. Enable notification on queued write. Fix reverse relaying. Separate Failover and fifo dir. Fix idmef-message-scheduler warning Some renaming. Update NEWS, update GnuLib code, bump version number. xmlSetProp() of empty value in case the attribute is NULL. Avoid libxml NULL warning. Update to use AC_HELP_STRING(). Update libwrap check, don't statically link libwrap. Cleanup. Fix GCC 4 warning IDMEF-XML generation fixes: Store Prelude-Manager FIFO into the profile backup directory so that FIFO are per profile. Fix #151. Implement CorrelationAlert processing Fix argument handling warning Update GnuLib code, NEWS. Bump version number. Update GnuLib code In case an IDMEF-Service object contain neither name or port attribute, set Update GnuLib code. Should fix OpenBSD getaddrinfo() problem. Remove unused. Sanitize analyzer(*).node too. Update GnuLib code and requirements. GnuLib update Update NEWS, Bump version number Verbose error message in case of Authentication initialization failure. Formatting tweak. Update gnulib code. Update gnulib code, version bump. Implement server_logic_destroy(). Rename server_generic_close() to server_generic_destroy(). Fully destroy the server_generic_t object. Fix a bug on system where getaddrinfo() return two entry for the same address with a different address type (ipv4 / ipv6). bind() would fail since the address was already bound. The code handling this specific problem was already implemented, but ended up in an infinite loop due to the failing server_generic_t object not being properly closed. Remove old and unused 'dlfcn.h' inclusion. Avoid compilation trouble on some system (example: OSX). Remove unused 'sys/poll.h' inclusion. Always use GnuLib replacement header. Avoid compilation trouble on some system (example: OSX). Update GnuLib code. Deprecate old socklen_t check in favor of the GnuLib socklen module. More improvement to the poll module bug fix commited previously. Here is time.h inclusion fixes. Remove deprecated check. Improve -no-cpp-precomp requirement check. Improve error checking. Update GnuLib code. Cleanup poll() replacement module. Update NEWS. Bump version number. Fix compilation issue on system where ferror() is not declared as a function. Fix #186. Update NEW, bump version number. Option handling cleanup. Warn about Un-handled command line arguments. Don't use an xmlOutputBufferPtr for writing the data. For an unknow reason, data written using this interface generate invalid, corrupted XML. Rather, use xmlDocFormatDump() with a FILE * descriptor. Fix #196. Update reporting code for the SNMPService class. Revert [8801] since the workaround had the problem of preceding all IDMEFMessage with an XML header. Add another proper fix for #196. Format string fixes. Allow filter plugin to hook another filter plugins. Update GnuLib code. Update. Missing fflush() when no_buffering is set. Update NEWS, bump version number. Module path migration: move /trunk/prelude-manager /prelude-manager/trunk Fix possible memory leaks when setting the logfile or destroying the debug instance. Improve error the porting. Always lock the sensors list mutex when accessing the list. Initial implementation of the 'thresholding' plugin. Fix problem when parsing multiple path separated by space. Correctly report IDMEF path error. Use idmef_path_new_fast(). All filter hooking to a reporting plugin are now OR'ed instead of being Change idmef-criteria option name to 'idmef-criteria' in place of 'idmef-criteria-filter' for consistency with the plugin name. Make sure hook_str is not NULL on get. Create / destroy the hash when needed. Don't append when adding new filtering path. Document the 'idmef-criteria' and 'thresholding' plugin in the configuration template. Update GNULib code Delete deprecated. Bump version number Update configuration template. Add documentation for Prelude Whitespace police. Whitespace police. Move IDMEF message normalization in the scheduler, rather than Whitespace police. Implement heartbeat->analyzer normalization. Add -Wformat and -Wformat-security to compilation flags. Whitespace police. Report libc error. Do not error out if fd is zero. The error checking code wasn't updated after the fopen -> open move. Whitespace police. Call prelude_client_destroy() and prelude_deinit() on exit. Whitespace police. Whitespace police. Remove log prefix. Fix some log priority. Improved error reporting Whitespace police. Remove log prefix. Fix some log priority. Improve IPv4 / IPv6 address normalization. Make normalize option available from the configuration file only. Whitespace police. Whitespace police. Fix strerror() warning. Whitespace police. GnuLib code update. Make a difference between exceptional report plugin failure (example: Accept list of path. Handle possible error from prelude_daemonize(). Prelude-Manager manpage, courtesy of Frédéric Motte <fmotte at ubixis.com>. Update NEWS, Bump version number. Whitespace police. Whitespace police. Whitespace police. Fix libprelude warning. Some reformating. Update NEWS, bump version number. Whitespace police. Do not share the tresholding hash accross thresholding plugin instance. Only initialize XML library on first plugin instance load. Only initialize libpreludedb on first plugin instance load. Correctly un-subscribe plugin instance. Fix warnings. Make threshold act like a real threshold: pass the event Update thresholding documentation. Update GnuLib code. Update NEWS, bump version number. New Prelude-Manager scheduler algorithm. Add missing copyright notice. New sched-priority and sched-buffer-size configuration options. Fix warnings. Whitespace police. Set global msgbuf data for each message we process. Update GnuLib code. Update NEWS, bump version number. Include missing GnuLib strsep module. Continued update for strsep (fix #277). Update NEWS, bump version number. Include libmissing and config.h, should fix compilation issue (fix #278). Update NEWS, bump version number. Build cleanup Build cleanup Massive cleanup of the build process, enable RELRO when possible. Merge branch 'libevent' Update GnuLib code, deprecate the poll module. More cleanup, always build with pthread CFLAGS. Update AS_AC_EXPAND() autoconf macro. Restart the EV watcher when changing the watched event: fix Initialize the auth subsection before the IDMEF message scheduler Update to libev-3.1 Fix a problem where write notification for reverse relay wouldn't Update copyright notice. Whitespace police. Remove deprecated code. Update GnuLib code. Use PATH_MAX. Update NEWS, bump version number. Update libev code. Update GnuLib code. Update NEWS, bump version number. The commercial Prelude-Manager-SMTP plugin is now open-sourced! Update GnuLib code. Bump to libev version 3.42. Fix distcheck. Update NEWS, bump version number. Correct strtoul() error checking. Fix a possible crash upon destruction of a bufpool that is writing Whitespace police. Improved error handling. Add support for newer gnutls_priority_init() and gnutls_priority_set() Handle IDMEF message version. Improve thread safety when evicting to disk. Update GnuLib code. Include sigaction GnuLib module. Update NEWS, bump version number. Define HAVE_LIBPRELUDEDB when needed, update NEWS, bump version. Check whether MIN() is already defined, fix build warning. Update to libev-3.43 Missing pthread.h inclusion. Warning fixes. Correctly disable libev unused features (fix #306). Update GnuLib code, include unit tests. Enable unit testing. Add GnuLib unit-tests as a libmissing SUBDIRS, break make distcheck Update NEWS, bump version. Port to glthread API. Unit tests. Update to latest libprelude / libpreludedb m4 code. Win32 compile fixes. GnuLib code update. Update glthread cond usage. Add missing SUBDIRS Include libmissing.h, fixes build error. Fix URL. Change bufpool_add_message() to not be recursive. Remove deprecated code, that was allocating an object and never using it. Add missing dlpreopening support for the SMTP plugin. Update for libtool 2.x compatibility. Update autogenerated INSTALL file. Upgrade to libev 3.53. Fix extern triggered warning. Code cleanup. Automatic .gitignores generation. Update GnuLib code. Deprecate libmissing.h usage. Update to libev 3.6 Update autotools generated file Update GnuLib code Automatic ChangeLog generation Update NEWS, bump version uid22067 (1): * src/server-generic.c (tcpd_auth): use the log() macro. _______________________________________________ Prelude-cvslog site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-cvslog