[ANNOUNCE]: prelude-correlator 0.9.0-beta7

We are pleased to announce the availability of Prelude-Correlator
0.9.0-beta7.

Prelude-Correlator serves to correlate, in real time, the multiple
events received by Prelude. Several isolated alerts, generated from
different probes, can thus trigger a single correlation alert should the
events be related.


------[ CHANGES ]------

- Initial SpamhausDrop plugin implementation, by
Wes Young <[email protected]> (closes #363)

- Do not discard --root parameters if prefix is absolute.

- Python 2.4 backward compatibility fixes.

- Handle plugin loading error gracefully.

- Improve WormPlugin accuracy, and make it carry a reference to the
initial event. The plugin used to alert when seeing an alert to a
given target, and this same alert going back to the source. This can
happen in a number of case (example: Netbios alert triggered by Snort)

As of now, the plugin will wait for the events to be repeated against
at least 5 differents hosts.

- Dshield CorrelationAlert now handle multiples events. Previously, we
used to generate a single Dshield CorrelationAlert for each events
where the source address would match the Dshield database. The plugin
now generate CorrelationAlert for multiples events received from the
same source.


------[ SUPPORT ] ------

Improving Prelude is costly, but you can help! We are looking for
organizations that find Prelude useful and wish to contribute back.

Commercial support contracts for Prelude are available, and they help
finance continued maintenance. PreludeIDS Technologies, a privately held
company, is currently funding Prelude maintenance.


------[ DOWNLOAD ]------

http://www.prelude-ids.com/development/download/


------[ CHECKSUM ]------

MD5 : 308e641ce0ba0ee9e51866ff2365e6ab
SHA1 : 2f3808e6e07abf08ff2180130f9d168661ba7def
SHA256 :
ae73a765fbda0f6d4c86d3d7061c2b95563d95746be89d7736e1966b261c4a4b


------[ OpenPGP key ]------

gpg --keyserver wwwkeys.pgp.net --recv-keys 0x23D2FAC3


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
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=1JFY
-----END PGP SIGNATURE-----

-- 
Yoann Vandoorselaere | Directeur Technique/CTO | PreludeIDS Technologies
Tel: +33 (0)8 70 70 21 58                       Fax: +33(0)4 78 42 21 58
http://www.prelude-ids.com


_______________________________________________
Prelude-devel site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-devel