Ubuntu Prelude Correlator bug 0.90-beta8

Sorry for the second email - but I have some more detailed information about the issue I am experiencing.

I install prelude via the synaptic tool in Ubuntu.  This gives me version 1.0 of libprelude and 0.9.0-beta8 of the correlator.  The correlator chokes when it has to "Set" the source and target of the correlated idmef alert. This occurs around line 122-123 in idmef.py of the prelude correlator. The call to idmef.Get("alert.source") returns a list object (of 1 element in most cases), but then the Set rejects the list as a value type in the elif section of the Set command.

I've hacked it to ignore this, but the correlator also fails when it tries to match the value against other values in the alert so as not to include duplicates.

Is this a bug in a version of prelude associated with Ubuntu? I don't think I've encountered this under Fedora.

Thanks,
Mike
_______________________________________________
Prelude-devel site list
[email protected]
http://lists.prelude-technologies.com/mailman/listinfo/prelude-devel