Re: [Prelude-IDS - The Hybrid IDS fr amework] Website News

hi,

> First of all, learn to express yourself correctly. We are *not* on MSN here.

it shouldn't sound like this, sorry !
it's just because it's the third time i contacted this mailing list and i wanted to know whether there are other users who might have the same problem !

> There is an alert for this, which is called "Log file deletion", see
> the prelude lml code:
> 
> #define LOGFILE_DELETION_CLASS "Log file deletion"
> #define LOGFILE_DELETION_IMPACT "An attacker might have erased the
> logfile,"               \
>                                 "or a log rotation program may have
> rotated the logfile."
> 
> #define LOGFILE_DELETION_IMPACT_HIGH "An attacker seems to have erased
> the log file, "      \
>                                      "and the change doesn't seem to
> be related to a log " \
>                                      "rotation program."

NOW you don't understand what i meant:
i don't reveice a "Log file deletion" alert but a "logfile inconsistency" alert !! totally different.

and concerning your "help" looking in the prelude lml code didnt't help at all cause there isn't any clue how
prelude lml decides how the log was altered.

> Sad for you maybe, but for us we prefer to help people who are not
> threatening us because they are too lame to ask correctly something
> they need.

i didn't "threaten" you or anybody in any way on this mailing list.
i just wanted to bring up my problem with prelude again, thats all.

why has the subject been changed ?

thanks,
david
_________________________________________________________________________
In 5 Schritten zur eigenen Homepage. Jetzt Domain sichern und gestalten! 
Nur 3,99 EUR/Monat! http://www.maildomain.web.de/?mc=021114

_______________________________________________
Prelude-user site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-user