[ANNOUNCE]: prelude-lml 0.9.9
Yoann Vandoorselaere <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel,gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <1178098575.1163.14.camel@localhost> |
1. We are pleased to announce the availability of Prelude-LML
0.9.9.
Prelude-LML is a signature based log analyzer monitoring logfile and
received syslog messages for suspicious activity. It handle events
generated by a large set of components, including but not limited to:
BigIP, Grsecurity, Honeyd, ipchains, Netfilter, ipfw, Nokia ipso,
Nagios, Norton Antivirus Corporate Edition, NTsyslog, PAM, Portsentry,
Postfix, Proftpd, ssh, etc.
------[ CHANGES ]------
- Pattern can now be used to specify file to be monitored.
- Fix an issue in the detection of buggy writev() FAM notification.
- Add bonding.rules, by Paul Robert Marino <[email protected]>.
- ModSecurity ruleset update: remove unnecessary fields + ModSecurity 2.0 compatibility.
- New Cisco IOS common ruleset, by Alexandre Racine.
- Avoid duplicating information in node name and node address.
- Add rule ID and revision to the generated alert for each matched rule. Fix #206.
- Handle "last" keyword even if the rule does not contain any IDMEF assignment. Fix #218.
- Various bug fixes.
------[ SUPPORT ] ------
Improving Prelude is costly, but you can help! We are looking for
organizations that find Prelude useful and wish to contribute back.
Commercial support contracts for Prelude are available, and they help
finance continued maintenance. PreludeIDS Technologies, a privately held
company, is currently funding Prelude maintenance.
------[ DOWNLOAD ]------
http://prelude-ids.org/download/releases/prelude-lml-0.9.9.tar.gz
http://prelude-ids.org/download/releases/prelude-lml-0.9.9.tar.gz.sig
http://prelude-ids.org/download/releases/prelude-lml-0.9.9.tar.gz.md5
------[ MD5SUM ]------
9d4f4241675aebcf5f7047585b687563 prelude-lml-0.9.9.tar.gz
------[ OpenPGP key ]------
gpg --keyserver wwwkeys.pgp.net --recv-keys 0x23D2FAC3
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)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=5cVD
-----END PGP SIGNATURE-----
--
Yoann Vandoorselaere | Responsable R&D / CTO | PreludeIDS Technologies
Tel: +33 (0)8 70 70 21 58 Fax: +33(0)4 78 42 21 58
http://www.prelude-ids.com
_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel