[ANNOUNCE]: prelude-lml 0.9.11

We are pleased to announce the availability of Prelude-LML 0.9.11.

Prelude-LML is a signature based log analyzer monitoring logfile and
received syslog messages for suspicious activity. It handle events
generated by a large set of components, including but not limited to:
BigIP, Grsecurity, Honeyd, ipchains, Netfilter, ipfw, Nokia ipso,
Nagios, Norton Antivirus Corporate Edition, NTsyslog, PAM, Portsentry,
Postfix, Proftpd, ssh, etc.


------[ CHANGES ]------

- Asterisk log format and new ruleset for SIP REGISTER method, by
  Sébastien Tricaud <[email protected]>.

- Honeytrap ruleset, by Bjoern Weiland (Fix #244).

- Kojoney honeypot ruleset, by Bjoern Weiland (fix #245).

- Rishi ruleset, by Bjoern Weiland (fix #246).

- Fix performance regression due to the introduction of OpenHostAPD
  ruleset. This double Prelude-LML performance.

- New rule to ignore cron jobs, by Pierre Chifflier
  <[email protected]> (fix #266).

- [ntsyslog]: Fix regex 1403, so it matches the provided log sample,
  by Pierre Chifflier <[email protected]>.

- [bonding]: Fix a few typos, and use the same type or end of lines
  (do not use mixed mode for CR and CR/LF) (fix #219), by
  Pierre Chifflier <[email protected]>.

- Replace 'ignore-metadata' option with a new 'metadata' option.
  Available arguments are: 'head' (start log analyzis from the head of
  the file), 'tail' (start log analyzis from the tail of the file),
  'last' (start log analyzis from the last known position of the file),
  'nowrite' (don't write any metadata while analyzing log files).

  Example: --metadata=tail,nowrite

- Improve LML logging message, make it less confusing.



------[ SUPPORT ] ------

Improving Prelude is costly, but you can help!  We are looking for
organizations that find Prelude useful and wish to contribute back.

Commercial support contracts for Prelude are available, and they help
finance continued maintenance. PreludeIDS Technologies, a privately held
company, is currently funding Prelude maintenance.


------[ DOWNLOAD ]------

http://www.prelude-ids.org/download/releases/prelude-lml-0.9.11.tar.gz
http://www.prelude-ids.org/download/releases/prelude-lml-0.9.11.tar.gz.sig
http://www.prelude-ids.org/download/releases/prelude-lml-0.9.11.tar.gz.md5
http://www.prelude-ids.org/download/releases/prelude-lml-0.9.11.tar.gz.sha1


------[ CHECKSUM ]------

* prelude-lml-0.9.11.tar.gz:
MD5 : 3f9e097b3535041913cc1fa0b8964a73
SHA1: f747a62cfe6eff09ff73a1c17c2c202a9b8b9963


------[ OpenPGP key ]------

gpg --keyserver wwwkeys.pgp.net --recv-keys 0x23D2FAC3


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iQIVAwUAR2Z4NhHxO34j0vrDAQJU5w/+LnITqXwx1ukmpHREXPmzVxrXov6bCT9J
ZnTexjvNY2PqVQ5uj1vFur3zXHRTORVFT3JA05D/0Kgct9Utcyot6xrL6DwfLu70
+vYvRNKY0uz2L3NZuFG4UST21Z3PKxZbCME9Vvm0wZlwUfaYeZeMNYsdCZccjl7l
XX2Q0CQ/FjZpSEDW7RYwXMcfLHjxYJxMTk+sOAYUke7pBrvzseArZ2BmlX8tsCJ7
1pGtF6mhXmlcI2r7oEJb5OdXX26o+HA1kyeTdTnvjPDqrbSWPeHHBdcze44fNdb4
RcpkV/RYiss4ZkCqRsBCCxqv2sBzndJzizcLhjMRITKv3sf5iKgeLJR7ANECVyro
53cNFjTf8UZUjWl+z1WzMDi1lVP0D6yPxeRK6X4yEpi1HvioPH1916D0WXLrrkHt
n8KA+bbSRCtXO4SOmGhbl0am7vgdINVupaHvXPNBOsJFAueb6MHgJio5SyC+UTqM
B2p0aHw0fnt4sM9XyByEUuh3FPwkLCBx0Cg340OT1AxjTavfR97/6qhTK5a3NvoU
KlK66XAs/IGR0ATp5FROjhiOU8QKdv0ecbezVQSZvHcbOPgnx8tiYIoSw5kZ/Zau
tWVWssCLWF1qCXTPrPYCyczWe1KIz3Qsrk59PObyg089XE4qo9Du0Lun0vVAlSa/
GhnW04LEQzg=
=gfxh
-----END PGP SIGNATURE-----

-- 
Yoann Vandoorselaere | Responsable R&D / CTO | PreludeIDS Technologies
Tel: +33 (0)8 70 70 21 58                  Fax: +33(0)4 78 42 21 58
http://www.prelude-ids.com

_______________________________________________
Prelude-user site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-user