[ANNOUNCE]: prelude-lml 0.9.12
Yoann Vandoorselaere <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel,gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <1208965316.6469.3.camel@arwen> |
We are pleased to announce the availability of Prelude-LML 0.9.12. Prelude-LML is a signature based log analyzer monitoring logfile and received syslog messages for suspicious activity. It handle events generated by a large set of components, including but not limited to: BigIP, Grsecurity, Honeyd, ipchains, Netfilter, ipfw, Nokia ipso, Nagios, Norton Antivirus Corporate Edition, NTsyslog, PAM, Portsentry, Postfix, Proftpd, ssh, etc. ------[ CHANGES ]------ - [rulesets]: Remove successful/failure keyword from classification (use IDMEF completion). Analyzer class sanitization. - [nagios] Handle Nagios V2 log entry (fix #283). - [spamassassin] Fix incorrect AdditionalData assignement. - New Suhosin ruleset, by Sebastien Tricaud <[email protected]> - Fix invalid logfile inconsistency alert that could be triggered in a rare case, after a renaming detection. Alert improvement. - On logfile inconsistency alert, do not re-analyze the whole file. - Remove the 1024 bytes per PCRE reference limit. - Minor bug fixes, build system cleanup. ------[ SUPPORT ] ------ Improving Prelude is costly, but you can help! We are looking for organizations that find Prelude useful and wish to contribute back. Commercial support contracts for Prelude are available, and they help finance continued maintenance. PreludeIDS Technologies, a privately held company, is currently funding Prelude maintenance. ------[ DOWNLOAD ]------ http://www.prelude-ids.org/download/releases/prelude-lml-0.9.12.tar.gz http://www.prelude-ids.org/download/releases/prelude-lml-0.9.12.tar.gz.sig http://www.prelude-ids.org/download/releases/prelude-lml-0.9.12.tar.gz.md5 http://www.prelude-ids.org/download/releases/prelude-lml-0.9.12.tar.gz.sha1 ------[ CHECKSUM ]------ * prelude-lml-0.9.12.tar.gz: MD5 : a5df440727355215b8d50ac757ddb84e SHA1: 42688bd63ffc52c014a727cd4530bbd3912c0637 ------[ OpenPGP key ]------ gpg --keyserver wwwkeys.pgp.net --recv-keys 0x23D2FAC3 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iQIVAwUASA9XnhHxO34j0vrDAQK7Vg//S75m83D6UlCMgDn6/7PBRUiH/qdGB2B5 40L8BjLPIm3aTjArSzaqjACsUCLR+eOP1TQYFaco2SHIK/yO+94A2noEq84CxjHy J5k2/jhcV6WzVUKW2CxnntM50ol+USaSRjVvoYhEFFsSLJVCPVgLGAutnkyU4n8/ HcYXJeRyXKPIeWGSs23ExHLKF2mB7o7btgr0v53zOpxXawoCZOeh7oguzl7AmwR6 tDcwUaG4pbF4Rn3qMPKZe8ER/XZXOzfAFIb+bN3V1oGccuE7Q/pqNTuNOEhU2aa/ AI+Oyhozm1lL3x/7Dk8Oz5mvyf2ceG44FaQLsl4crDVqsO15NMtdQ/VWyd0BAqvK tXA80m9cck0tMUnmvnzU9wGX4TJlko8Ey0f+xYey4j5Aw6p4h8NT8gu00YVbzvbi o5D/D9JfSbr00EEuzdR3kQSommeVzcOi0A2hOhPt565HKWfBw2hLqc5ZnAdSFAhw Ts8PDrFF8kRyw29HArc9SZMFehwdWCekXbnq8+SOAuNpLkveJMQsGaAkvq1RVit0 YtZjcg5D9tmOxKZq+KHLhfKSqGmJiUJ/YEgsATKrO8i8Iq58NgVqoWVgAjhKktSM h2blAWok6fsdspcgvA69B9FiC6yTFrPE3uU57bnziJOLK3+oT3cuSS3Ojaa8mirR MHVelvI0VXg= =NKFH -----END PGP SIGNATURE----- -- Yoann Vandoorselaere | Responsable R&D / CTO | PreludeIDS Technologies Tel: +33 (0)8 70 70 21 58 Fax: +33(0)4 78 42 21 58 http://www.prelude-ids.com _______________________________________________ Prelude-devel site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-devel