[ANNOUNCE]: prelude-lml 0.9.5
Yoann Vandoorselaere <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel,gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <1147877268.10681.16.camel@arwen> |
We are pleased to announce the availability of Prelude-LML 0.9.5. Prelude-LML is a signature based log analyzer monitoring logfile and received syslog messages for suspicious activity. It handle events generated by a large set of components, including but not limited to: BigIP, Grsecurity, Honeyd, ipchains, Netfilter, ipfw, Nokia ipso, Nagios, Norton Antivirus Corporate Edition, NTsyslog, PAM, Portsentry, Postfix, Proftpd, ssh, etc. ------[ CHANGES ]------ * prelude-lml-0.9.5: - Experimental context support (ala SEC): we now handle multiline log matching. - Update PAX rules so that it use the new context feature. - Don't exit on statistics signal, improve statistics precision, make them easier to read. - Fix some problem with user & group options. - text-output argument is optional. - New experimental ruleset: Sonicwall and Spamassassin. These need to be manually hooked to pcre.rules if you plan to use them. - Fix FAM activation switches. ------[ SUPPORT ] ------ Improving Prelude is costly, but you can help! We are looking for organizations that find Prelude useful and wish to contribute back. Commercial support contracts for Prelude are available, and they help finance continued maintenance. PreludeIDS Technologies, a privately held company, is currently funding Prelude maintenance. ------[ DOWNLOAD ]------ http://prelude-ids.org/download/releases/prelude-lml-0.9.5.tar.gz http://prelude-ids.org/download/releases/prelude-lml-0.9.5.tar.gz.sig http://prelude-ids.org/download/releases/prelude-lml-0.9.5.tar.gz.md5 ------[ MD5SUM ]------ 033b1feb59013001a21656ba0d6e5806 prelude-lml-0.9.5.tar.gz ------[ OpenPGP key ]------ gpg --keyserver wwwkeys.pgp.net --recv-keys 0x23D2FAC3 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (GNU/Linux) iQIVAwUARGs27hHxO34j0vrDAQLZsA/9GhncsYj0G/8A+HoFPpTnjKFhwwWrwIes E9AJKErX/0Hxo+pZNc4RHV5aMlWfdZbbNxbW7RWcUgSnWF8CVEgJ2jYunRkUkIrt 3B9Sttu3RHHOQuBErvlmYbCjmvIs8R3fUg/uTX9P6u1dEEyDGGSpfXw89F7FDTaW y3yvwyYxxuoZYM85rtB5tOWnXlcLK+KdQtYRXZSSZF7w88V5I5N6XvbNTdz3ekKm 06xHIjkI6fgx8XwKIH1072uT09CEFNdD5aq4kqHA9ybBwqXx1zB/t8j2dvH7c/sF X0IT7TyWvlGK/vgABDKY2YoJM+YB0YXyjVokItu1LSJjOkw3vHT8Et4jlHGYN0H1 zYhEDGLGnuEnvcuSuqMZQkaLO0mx8Kyq/8XTS3Cx6N9QqUrUhH4vaRHXHsiSioTk V6KgcascxhuAkaUz7Mx1OXZbHsF0BWYkbitDy7/JDwVwnEW2e2rAAvehal7xxyJw bjZGOWxGd+qxSP3C3cvtS74YvqW6CBMvzDfANEDwq19j937jreYfXcXSJ/xzaLDw sTZqRHn2uyBdX0g9JIDgmQOLwlGv8tfmV7+FSbFg/XFD+IdV6IKYMeYUnUDr4MQu VljEJzTcb8V072xxJzWnOYNa3+gK2XItTIsxQ0ru2wD2+PbPoJlpN01xxWEJesuR 1eigpuJ161s= =ocly -----END PGP SIGNATURE----- -- Yoann Vandoorselaere | Responsable R&D / CTO | PreludeIDS Technologies Tel: +33 (0)8 70 70 21 58 Fax: +33(0)4 78 42 21 58 http://www.prelude-ids.com _______________________________________________ Prelude-devel site list [email protected] http://www.prelude-ids.org/mailman/listinfo/prelude-devel