[ANNOUNCE]: prelude-lml 0.9.14

Yoann Vandoorselaere <[email protected]> Fri, 17 Oct 2008 14:23:30 +0200
Newsgroups gmane.comp.security.ids.prelude.devel,gmane.comp.security.ids.prelude.user
Message-ID <[email protected]>
We are pleased to announce the availability of Prelude-LML 0.9.14.

Prelude-LML is a signature based log analyzer monitoring logfile and
received syslog messages for suspicious activity. It handle events
generated by a large set of components, including but not limited to:
BigIP, Grsecurity, Honeyd, ipchains, Netfilter, ipfw, Nokia ipso,
Nagios, Norton Antivirus Corporate Edition, NTsyslog, PAM, Portsentry,
Postfix, Proftpd, ssh, etc.


------[ CHANGES ]------

- Fix log file permission error, that could happen thought the user 
Prelude-LML was running as could access the file (#291).

- ModSecurity ruleset update, by Dan Kopecek <[email protected]>:
provides much more descriptive classification.text, add regexps for
[file ..], [line ...], [tag ...] fields and fine tune targets/types
(#321).

- Deprecate Gamin/FAM support in favor of libev: the previous
implementation had problem on SELinux enabled system due to Gamin server
startup being triggered by other program, and thus using improper role
for Prelude-LML.
(#326).

- Improved polling architecture by using Operating System specific
backend when possible.

- We now monitor files that are not immediately available for reading on
startup: once the file can be monitored, libev provide us with a
notification.


------[ SUPPORT ] ------

Improving Prelude is costly, but you can help! We are looking for
organizations that find Prelude useful and wish to contribute back.

Commercial support contracts for Prelude are available, and they help
finance continued maintenance. PreludeIDS Technologies, a privately held
company, is currently funding Prelude maintenance.


------[ DOWNLOAD ]------

http://www.prelude-ids.com/development/download/


------[ CHECKSUM ]------

MD5 : e95c1e4c6a8f4196d87121914a4683e6
SHA1 : 586e9f19eaed2f2ba9d869a5fd7b0e391e0e5a68
SHA256 :
77dc41324a049686e8fc1001f9d104ebcdda2ddd1925f2caa122c053283a5198


------[ OpenPGP key ]------

gpg --keyserver wwwkeys.pgp.net --recv-keys 0x23D2FAC3


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
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=/ivf
-----END PGP SIGNATURE-----

-- 
Yoann Vandoorselaere | Responsable R&D / CTO | PreludeIDS Technologies
Tel: +33 (0)9 50 70 21 58                  Fax: +33(0)9 57 25 21 58
http://www.prelude-ids.com

_______________________________________________
Prelude-devel site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-devel