Re: Prelude correlator "Brute Force attack/Multiple failed login against a single account"

Yoann Vandoorselaere <[email protected]> Wed, 17 Mar 2010 15:18:36 +0100

Newsgroups	gmane.comp.security.ids.prelude.user
Message-ID	<1268835516.2068.54.camel@arwen>

Hi Jaime,

Le mardi 16 mars 2010 à 10:48 +0000, Jaime Ventura a écrit :
> I'm using prelude for over a 1 year, and i've decided to update to 1.0.0
> RC releases of the several prelude components.
> Everything seams to work fine, except for Prelude correlator.
> I notice that Prelude correlator(1.0.0~rc4) is detecting "Brute Force
> attack/Multiple failed login against a single account" while all events
> are "login successfully".
> 
> Can anyone help me you on this?

Thanks for reporting the problem : it has been fixed in
Prelude-Correlator 1.0.0, which is already available on the Prelude
website.

Regards,

-- 
Yoann Vandoorselaere | Directeur Technique/CTO | PreludeIDS Technologies
Tel: +33 (0)1 40 24 65 10                      Fax: +33 (0)1 40 24 65 28
http://www.prelude-technologies.com

_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-technologies.com/mailman/listinfo/prelude-user