prelude-correlator/master: Update NEWS, bump version number

commit d55227226321824d406c28704bb4bcffbc68d5d8
Author: Yoann Vandoorselaere <[email protected]>
Date:   Fri Jan 29 12:51:01 2010 +0100

    Update NEWS, bump version number


========================================

 NEWS                                 |   49 ++++++++++++++++++++++++++++++++++
 prelude_correlator.egg-info/PKG-INFO |    2 +-
 setup.py                             |    2 +-
 3 files changed, 51 insertions(+), 2 deletions(-)

========================================

diff --git a/NEWS b/NEWS
index ae11876..7f47bf4 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,52 @@
+* 2010-01-29, prelude-correlator-1.0.0rc1:
+
+- [Firewall]: The plugin will now report CorrelationAlert for events /
+  sets of events that appear to have passed through a firewall known to
+  protect the target machine. If no firewall ever emit block concerning
+  a given host, then this host is considered un-protected, and there is
+  no point in reporting CorrelationAlert.
+
+- [OpenSSHAuth]: The plugin has been modified so that it can now
+  generate a single CorrelationAlert for multiples authentication method
+  used in a given time slice.
+
+- [Spamhaus]: The plugin has been modified so that it can now generate a
+  single CorrelationAlert for multiples events received from the same
+  source.
+
+- [BruteForce]: Various improvement, do not limit the number of events
+  the plugin is able to report in a single CorrelationAlert.
+
+- [Scan]: do not limit the number of events the plugin is able to report
+  in a single CorrelationAlert.
+
+- Context initialization now take an optional 'overwrite' argument. This
+  argument, if set to False, mean that the Context() will be returned
+  un-modified if it already exist. If it doesn't, it will be created.
+
+- New Context.update() method, which provide exactly the same
+  functionality as calling Context() with the 'update=True' argument.
+  This is useful since some plugin need to defer an update to another
+  place in the code.
+
+- If the context creation/update function is called with an IDMEF message
+  parameter, then we automatically call addAlertReference on the context
+  CorrelationAlert using the provided message as the parameter.
+
+- Make it possible to change context option on update
+
+- Automatically set CorrelationAlert DetectTime : reported
+  CorrelationAlert DetectTime now match the time of the first event that
+  was detected.
+
+- Make it possible for plugin to specify a function to be called on
+  Timer expiration.
+
+- Disable BusinessHour correlation by default since it is very verbose
+
+- Various bug fixes.
+
+
 * 2009-11-03, prelude-correlator-0.9.0-beta8:
 
 - Include spamhaus_drop.dat in the source distribution. Fix installation
diff --git a/prelude_correlator.egg-info/PKG-INFO b/prelude_correlator.egg-info/PKG-INFO
index 702b465..182e5c6 100644
--- a/prelude_correlator.egg-info/PKG-INFO
+++ b/prelude_correlator.egg-info/PKG-INFO
@@ -1,6 +1,6 @@
 Metadata-Version: 1.0
 Name: prelude-correlator
-Version: 0.9.0-beta8
+Version: 1.0.0rc-1
 Summary: Prelude-Correlator perform real time correlation of events received by Prelude
 Home-page: http://www.prelude-ids.com
 Author: Yoann Vandoorselaere
diff --git a/setup.py b/setup.py
index f06ca4e..41a86a0 100644
--- a/setup.py
+++ b/setup.py
@@ -8,7 +8,7 @@ from setuptools import setup, find_packages
 from setuptools.command.install import install
 from setuptools.command.sdist import sdist
 
-PRELUDE_CORRELATOR_VERSION = "0.9.0-beta8"
+PRELUDE_CORRELATOR_VERSION = "1.0.0rc-1"
 
 
 class my_sdist(sdist):
_______________________________________________
Prelude-cvslog site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-cvslog