[ANNOUNCE]: prelude-lml 0.9.8
Yoann Vandoorselaere <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel,gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <1166201408.5608.28.camel@arwen> |
We are pleased to announce the availability of Prelude-LML 0.9.8.
Prelude-LML is a signature based log analyzer monitoring logfile and
received syslog messages for suspicious activity. It handle events
generated by a large set of components, including but not limited to:
BigIP, Grsecurity, Honeyd, ipchains, Netfilter, ipfw, Nokia ipso,
Nagios, Norton Antivirus Corporate Edition, NTsyslog, PAM, Portsentry,
Postfix, Proftpd, ssh, etc.
------[ CHANGES ]------
* prelude-lml-0.9.8:
- Introduce Cisco ASA IPS module support.
- Introduce yum support.
- Introduce Cacti thold plugin support.
- Introduce Microsoft Cluster Service support.
- Honeyd rules update and improvement.
- Updated NAVCE rules; modified ClamAV rules for consistency.
- Improve NTSyslog ruleset.
- Added rule to ignore LML's "could not match prefix" log entries.
- Fix format problem with Apache logs from western hemisphere (- versus
+ TZ).
- Fix Squid process exited rule (#185).
------[ SUPPORT ] ------
Improving Prelude is costly, but you can help! We are looking for
organizations that find Prelude useful and wish to contribute back.
Commercial support contracts for Prelude are available, and they help
finance continued maintenance. PreludeIDS Technologies, a privately held
company, is currently funding Prelude maintenance.
------[ DOWNLOAD ]------
http://prelude-ids.org/download/releases/prelude-lml-0.9.8.tar.gz
http://prelude-ids.org/download/releases/prelude-lml-0.9.8.tar.gz.sig
http://prelude-ids.org/download/releases/prelude-lml-0.9.8.tar.gz.md5
------[ MD5SUM ]------
4aa7ccb3159ac1241c147499936dcd8e prelude-lml-0.9.8.tar.gz
------[ OpenPGP key ]------
gpg --keyserver wwwkeys.pgp.net --recv-keys 0x23D2FAC3
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
iQIVAwUARYLRFBHxO34j0vrDAQI14g//d7mDvUPu79G3ZrFu1j/mfUjf9Impc0eu
7nmbdUqQ1xrIzxMpXOsQ+BujelZdkBxNZh/K6rhOqZ3XuxzY8nzNQ9JgxpJXszXi
h8SObKyRs3vDQpyNuf5pz7y1mYXh4uAycIPllRvdjs6YfyDrL9/aZ20z2O4AxD1W
l5txv4XAVXtpWDo84nxA7sGdrBbivxUBxYwsAzH5eFHI4XKpLIkfZx93Qub9YeTH
U58WH86ds3vQmcslgNxwHZKHjr1tegy4Dq8EChCKfjdJxk11VwIaoROY0ERGUz+d
a5fH2HbVZMdlGCY3bizl1g3XHcont8NEm9Z0VmMVx3n4B2A2C60CzIHhx3bIlD/h
pooREFPTnb0pDUtyMaXUbcrDXM6AAWegMdrVx6OKelM7RQ83bXNlJzJKHIRXL/xm
RmmcKuRNLmbz+CdFDgdpjhdbMFGzCosdN906XonfxwoMxwvQKzbAQOHVUMc63fi3
isYU3r5n5bGTligEfb/wKQNVNANrlWV5UXwruYpyjSke9v8r2jkLkVdvthe6lhM4
igO5Mu7ilqSQLsNDEI9tiTuc/uG16tNatB7p9HsRTudn8LO1g4BSryWYgvI4TRev
DZ7SGKow4jgp/2fetR4KqPdifR7XOoKkbRaLwDU1kaFaxaftwrcdDxpbSAgMjB0T
VHQN0nZO2Iw=
=4KLP
-----END PGP SIGNATURE-----
--
Yoann Vandoorselaere | Responsable R&D / CTO | PreludeIDS Technologies
Tel: +33 (0)8 70 70 21 58 Fax: +33(0)4 78 42 21 58
http://www.prelude-ids.com
_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel