-
Notifications
You must be signed in to change notification settings - Fork 4
/
Copy pathNEWS
1062 lines (561 loc) · 27.4 KB
/
NEWS
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
* 2020-09-09, prelude-manager-5.2.0:
No new changes.
* 2020-08-04, prelude-manager-5.2.0rc2:
Author: Antoine Luong
- Change company name
- Fix script execution plugin
* 2020-07-23, prelude-manager-5.2.0rc1:
* 2020-06-30, prelude-manager-5.2.0beta2:
No new changes.
* 2020-06-19, prelude-manager-5.2.0beta1:
Author: Yoann Vandoorselaere
- Add relaying and reverse relaying plugin
- Add script execution plugin
- Use a bufpool for reverse relaying
- Properly restore buffer pool state
- Fix possible deadlock with multiple thread evicting
Author: Francois Poirotte
- Add SNMP traps plugin
* 2019-09-13, prelude-manager-5.1.0:
No new changes.
* 2019-09-04, prelude-manager-5.1.0rc1:
Author: Antoine Luong
- Remove unused SELinux rules
* 2019-07-17, prelude-manager-5.1.0beta1:
Author: Yoann Vandoorselaere
- Revert "Correct AdditionalData output"
* 2019-03-15, prelude-manager-5.1.0alpha1:
Author: Antoine Luong
- Fix typo in config file
* 2018-09-07, prelude-manager-5.0.0:
Author: Antoine Luong
- Update GnuLib code
* 2018-08-17, prelude-manager-5.0.0rc1:
Author: Yoann Vandoorselaere
- Memory corruption fixes
* 2018-05-04, prelude-manager-5.0.0beta2:
Author: Song Tran
- Add SELinux policies
* 2018-04-13, prelude-manager-5.0.0beta1:
Author: Antoine Luong
- Update GnuLib code
* 2018-02-09, prelude-manager-4.2.0rc1:
Author: Thomas Andrejak
- Remove old references to relaying
Author: Antoine Luong
- Do not return negative value on db_run success
* 2017-07-21, prelude-manager-4.1.0:
No new changes.
* 2017-07-13, prelude-manager-4.1.0rc2:
Author: Yoann Vandoorselaere
- Update GnuLib code
* 2017-06-30, prelude-manager-4.1.0rc1:
No new changes.
* 2017-06-23, prelude-manager-4.1.0beta2:
Author: Yoann Vandoorselaere
- Fix possible crash when tls-options is set to NONE
* 2017-06-16, prelude-manager-4.1.0beta1:
Author: Yoann Vandoorselaere
- SMTP plugin is now asynchronous
This prevent locking Manager main worker thread.
However, SMTP plugin failover is not supported anymore.
- Migrate IDMEF message scheduler to libev
- Release lock while executing timer
Prevent server thread stall in the boggus case
where timer execution is itself stalled.
* 2017-02-16, prelude-manager-4.0.0:
Author: Yoann Vandoorselaere
- prelude-manager heartbeat did not assign messageid
* 2017-02-12, prelude-manager-4.0.0rc3:
* 2017-02-03, prelude-manager-4.0.0rc2:
* 2017-01-27, prelude-manager-4.0.0rc1:
No new changes.
* 2017-01-12, prelude-manager-4.0.0beta2:
Author: Yoann Vandoorselaere
- Update GnuLib/libev code
- Get rid of libgcrypt
* 2016-12-23, prelude-manager-4.0.0beta1:
No new changes.
* 2016-09-14, prelude-manager-3.1.0:
No new changes.
* 2016-09-01, prelude-manager-3.1.0rc3:
Author: Thomas Andrejak
- Rename --with-libwrap-prefix to --with-libwrap
Author: Song Tran
- Add SELinux policy for Unix socket connection
* 2016-08-19, prelude-manager-3.1.0rc2:
Author: Thomas Andrejak
- Fix configure for --enable-libmaxminddb
- Fix configure for --with-libwrap-prefix=yes
* 2016-08-05, prelude-manager-3.1.0rc1:
Author: Thomas Andrejak
- Allow the libev on system to be used
Thanks to Gokturk Yuksek <gokturk@gentoo.org>
- Rename configure.in to configure.ac
Author: Yoann Vandoorselaere
- Reverse relaying code fixes / performance improvements
- Reduce per connection memory footprint
- Use hash-table for analyzerid->client lookup performance
- Reading events from multiple agents using the same analyzerid now works (even though it is not advised)
- Update libev and GnuLib code
- Fix possible debug and smtp plugins assertions
- Fix memory corruption with multiple reverse relay
- Fix double free in case of failover saving error
- Prevent some geoip warnings
Author: Antoine Luong
- Fix assertion errors in thresholding plugin
* 2016-04-22, prelude-manager-3.0.0:
No new changes.
* 2016-04-15, prelude-manager-3.0.0rc4:
Author: Antoine Luong
- Prevent a segfault in write_connection_cb()
* 2016-04-08, prelude-manager-1.3.0rc3:
Author: Song Tran
- Add aditional SELinux policy
* 2016-04-01, prelude-manager-1.3.0rc2:
Author: Camille Gardet
- Add info about geolocation support
* 2016-03-25, prelude-manager-1.3.0rc1:
Author: Louis-David Gabet
- Replace stderr by /dev/stdout in configuration
* 2016-03-18, prelude-manager-1.3.0beta2:
Author: Song Tran
- Additional SELinux policies
Author: François Poirotte
- Add a default threshold to handle bursts
* 2016-03-01, prelude-manager-1.3.0beta1:
Author: Yoann Vandoorselaere
- Event geo-location support through normalisation
Implement support for libmaxminddb, allowing to set per-event geolocation
information within events AdditionalData.
Author: Song Tran
- Add SELinux policies
Author: Thomas Andrejak
- Change prelude-ids.com to prelude-siem.com
* 2016-01-11, prelude-manager-1.3.0alpha1:
Author: Antoine Luong
- [#640] Fix libpreludedb compatibility issue in SMTP plugin
- Update Prewikka path in SMTP template
* 2015-07-31, prelude-manager-1.2.6:
No new changes.
* 2015-07-27, prelude-manager-1.2.6rc5:
Author: Yoann Vandoorselaere
- Make sure we listen on all interface (IPv4+IPv6 dual stack fixes)
* 2014-10-15, prelude-manager-1.2.6rc3:
Author: Yoann Vandoorselaere
- Use --lgpl=2 when invoking GnuLib, remove obsolete GnuLib files
- Correct AdditionalData output
* 2014-09-23, prelude-manager-1.2.6rc2:
Author: Yoann Vandoorselaere
- Update libev code
- Update GnuLib code
- Use PKCS3 format rather than binary form for writing Diffie-Hellman parameters.
- Use system defined SOMAXCONN, increase replacement value
* 2014-07-07, prelude-manager-1.2.5:
- Removed rhel6 packaging
- Update libev
- Warning fixes
- Autoconf / Automake fixes, Update GnuLib code
Configure script generation and make distcheck work again.
Remove deprecated autoconf macro, update obsolete one.
- Relaying cleanup
* 2012-06-13, prelude-manager-1.0.2:
- Changed copyrights
- Added packaging for rhel6
- Relaying functions have been transfered to the Enterprise Edition
* 2010-10-26, prelude-manager-1.0.1:
- An infinite loop was possible on insertion of an event whose length was
higher than the 'on disk threshold' value in the processing queue. Closes #385.
- Fix prelude-string warning in case of a NULL IDMEF impact description: this
is an optional element. Closes #376.
* 2010-03-16, prelude-manager-1.0.0:
- Minor changes since rc1.
* 2010-01-29, prelude-manager-1.0.0rc1:
- Upgrade to libev 3.9
- Use pkg-config for GnuTLS detection, as required by recent GnuTLS
version.
- Various bug fixes.
* 2009-07-10, prelude-manager-0.9.15:
- Make Prelude-Manager thread backend independant.
- Add missing dlpreopening support for the SMTP plugin.
- Win32 compilation fixes.
- Various fixes and update.
* 2008-08-21, prelude-manager-0.9.14.2:
- Various build fixes (#306).
* 2008-07-29, prelude-manager-0.9.14.1:
- Correctly define HAVE_LIBPRELUDEDB, so that more SMTP plugin
features are enabled.
* 2008-07-18, prelude-manager-0.9.14:
- Improve thread safety when evicting events to disk.
- Handle IDMEF message version tag, which will be used in upcoming
libprelude version.
- Add support for newer GnuTLS 2.2.0 session priority functions. When
the option is available, the user might specify TLS settings through
the "tls-options" configuration entry.
- Fix a possible crash upon destruction of a bufpool that is writing to
a failover.
- Correct strtoul() error checking, when verifying scheduler options.
* 2008-04-28, prelude-manager-0.9.13:
- Update libev, and GnuLib code.
- The commercial Prelude-Manager-SMTP plugin is now open-sourced, and
included within the Prelude-Manager tarball!
* 2008-04-28, prelude-manager-0.9.12.1:
- Update libev, and GnuLib code.
* 2008-04-01, prelude-manager-0.9.12:
- Use libev in place of the server-logic architecture: libev provides
the most scalable event notification mechanism available on a given
operating system.
- New connection-timeout option, governing the maximum number of
seconds a client might take to authenticate (default: 10 seconds).
- Fix a possible file descriptor leak on connection closure error.
- Massive cleanup of the build process, enable RELRO when possible.
- Fix a number of potential race in the reverse relaying code.
- When reverse relaying messages, encode the same message once for all
recipients: this improve performance with more than one reverse
relaying client (was a long time FIXME).
- Libev introduction also fix a rare issue where server-logic would not
notice a dead connection.
* 2008-02-07, prelude-manager-0.9.11.2:
- Missing config.h inclusion, leading to GnuLib module compilation failure
on some architecture (Solaris). Fix #278.
* 2008-02-06, prelude-manager-0.9.11.1:
- Add missing strsep module from GnuLib, fix build failure on architecture
missing strsep (Solaris). Fix #277.
* 2008-02-05, prelude-manager-0.9.11:
- In case a lot of message were being processed, the heartbeat timer
could be delayed for a long period of time.
- The old scheduler algorithm could be unfair when certain message priority
were not available for processing. We now appropriatly handle repartition
to others priority messages.
- Message of the same priority could be processed in the wrong order when
on-disk buffers were used.
- No integrity check were performed on orphan on-disk buffer in case of an
operating system crash. By using the prelude-failover API, we can now
detect possibly corrupted disk buffer, or resume at the time we stopped
recovering them.
- New sched-priority and sched-buffer-size configuration options.
- Fix a bug where several relaying plugin instance would only forward
their message to a single Manager.
* 2007-10-02, prelude-manager-0.9.10:
- Make threshold act like a real threshold: pass every Nth events
in the defined amount of seconds.
- Allow mixing Limit and Threshold.
- Do not share the tresholding hash accross thresholding plugin instance:
previously, the shared hash would result in strange thresholding plugin
behavior if you had several instance of thresholding loaded.
- Various bug fixes concerning plugin instance un-subscribtion (unsubscribtion
of certain plugin was not triggered).
* 2007-09-23, prelude-manager-0.9.9.1:
- Fix for new libprelude (0.9.15) runtime warning.
- Add documentation for SQLite3 in the template configuration file
(Sébastien Tricaud <toady at gscore.org>).
* 2007-08-03, prelude-manager-0.9.9:
- Update configuration template, add documentation for Prelude
generic TCP options.
- Implement modified patch from Pierre Chifflier <chifflier@inl.fr>
to fix the example log path (fix #224).
- Move IDMEF message normalization in the scheduler, rather than
doing it upon reception. This remove some load from the server
and allow Prelude-Manager own IDMEF messages to go through the
normalizer path.
- Implement heartbeat->analyzer normalization.
- Improve IPv4 / IPv6 address normalization.
IPv4 mapped IPv6 addresses are now mapped back to IPv4.
Additionally, the Normalize plugin now provide two additionals option:
ipv6-only: Map any incoming IPv4 address to IPv6.
keep-ipv4-mapped-ipv6: do not map IPv4 mapped IPv6 addresses back to IPv4.
- Make a difference between exceptional report plugin failure (example:
a single message couldn't be processed) and "global" plugin failure
(example: database server is down). We use a different failover for
'exceptional' failure, so that we don't try to reinsert a bogus message
(fix #247).
- Start of a Prelude-Manager manpages (#236).
- Various bug fixes.
* 2007-05-02, prelude-manager-0.9.8:
- Initial implementation of the 'thresholding' plugin, allowing you to
suppress events after a certain limit/threshold.
- Filters hooking to a reporting plugin are now OR'ed instead of being
AND'ed. AND is already possible by hooking filtering plugin one with
another.
- Improved error reporting.
- Minor bug fixes.
* 2007-03-16, prelude-manager-0.9.7.2:
- Allow filtering plugins to hook others filters plugins.
- Update reporting code to latest specification for the SNMPService class.
- Warn about Un-handled command line arguments.
- Properly dump IDMEF-XML output (fix #186).
- Various bug fixes.
* 2006-12-21, prelude-manager-0.9.7.1:
- Fix compilation issue on system where ferror is not declared as a function,
regression introduced in 0.9.7 (#186).
* 2006-12-20, prelude-manager-0.9.7:
- Fix a startup problem on system with different address of different family
mapping to the same IP.
- Fix for system using the GnuLib poll replacement modules. The module was
broken when used in conjunction with server socket.
- Various portability fixes (this release should compile and run on OSX out of the box).
* 2006-10-04, prelude-manager-0.9.6.1:
- Fix possible undefined reference to GnuLib symbols.
- Verbose error message in case of Authentication initialization failure.
* 2006-08-24, prelude-manager-0.9.6:
- In case an IDMEF-Service object contain neither name or port
attribute, set name to "unknown" in order to avoid IDMEF DTD
validation issue.
- Normalize analyzer(*).node.
- Fix OpenBSD getaddrinfo() problem.
* 2006-06-14, prelude-manager-0.9.5:
- Store Prelude-Manager FIFO into the profile backup directory so that FIFO
are per profile. Fix #151.
- Update libwrap check, don't statically link libwrap. Cleanup. Fix #144.
- XMLmod: Implement CorrelationAlert processing.
- XMLmod: No ntpstamp attribute in File/Inode element datetime fields.
- XMLmod: permission -> Permission, as per IDMEF DTD requirements.
- XMLmod: Process the Checksum IDMEF element.
- XMLmod: Make AdditionalData validation pass (IDMEF v15 -> v16 change).
- XMLmod: disable-buffering option argument is optional.
- XMLmod: Correct DTD loading error.
- XMLmod: Avoid NULL libxml warning.
* 2006-03-28, prelude-manager-0.9.4.1:
- Enable write notification on queued write (Fix reverse relaying).
- Fix IDMEF message scheduler warning when plugin failover is enabled.
* 2006-03-17, prelude-manager-0.9.4:
- Fix reverse relaying on some architecture due to thread safety
issue.
- Server scalability improvement in case of message burst.
- Start work on a normalization plugin. Very simple for now, mostly
sanitize IDMEF Address and IDMEF Service classes.
- When an analyzer have read and write permission to prelude-manager,
avoid acting as an echo server, don't send received message from this
analyzer to itself.
- When no listen address is specified, try to bind all
system address (both ipv4/ipv6).
- Send an alert to the peer on handshake failure, so that
the peer have some information on what happened.
- Consistency work accross all plugin logfile option.
- Various bug fixes and improvements.
* 2006-02-09, prelude-manager-0.9.3:
- Only send TLS alert if there is one queued, fix a possible crash.
- Emit warning if prelude-failover problem arise.
- Improve error handling.
- Improve db plugin log option, "-" now mean stdout.
- Various bug fixes.
* 2006-01-30, prelude-manager-0.9.2:
- Allow "file" configuration settings to be set from the
database plugin, to handle file based database (SQLite).
- prelude-manager has been updated to check the loaded revocation
list, if available. This was needed since the recent prelude-adduser
addition allowing to create analyzer revocation list.
- Remove line size limitation on specified IDMEF-criteria.
- Remove all ancillary groups as well as setgid-ing.
- Fix idmef-criteria-filter option conflict.
- Fix a possible crash if no listen address is specified, but a
reverse relay is used.
- Much better error reporting.
* 2005-11-14, prelude-manager-0.9.1:
- Ability to listen on multiple IP address.
- Fix possible race condition with per-sensor queue creation.
- Fix orphaned disk queues that could remain un-flushed in case
of incorrect Manager shutdown.
- Cleanup.
* 2005-09-20, prelude-manager-0.9.0:
- 0.9.0 final.
- Improve error reporting.
- Fix failover on relaying.
- Fix warnings.
* 2005-08-17, prelude-manager-0.9.0-rc8:
- Re-establish signal handler for older Unix.
- New user/group configuration option, that might be used so
that prelude-manager, if started as root, drop privilege.
- Change from old port number (5554) to IANA assignated port number
for Prelude (4690).
* 2005-08-01, prelude-manager-0.9.0-rc7:
- Allocate an unique instance ID per connecting analyzer. Allow
to make the difference between two parallel connection from the
same analyzer.
- FD_CLOEXEC on opened fd: Fix file descriptor leak on SIGHUP.
* 2005-07-01, prelude-manager-0.9.0-rc6:
- Correct textmod printing of microseconds.
- Check permission on startup and refuse to start if there
is a problem. Should prevent some users mistake.
- Fix problem with Xmlmod handling of text data (was creating
problem in case they contained the & character).
- More detailed error messages.
- GCC4 warnings fixes & 64bits platform warnings fixes.
More C89 compliance.
* 2005-05-26, prelude-manager-0.9.0-rc5:
- Fix leak on local configuration message.
- Default to listening on localhost instead of UNIX domain socket.
- Fix compilation problem on system lacking PRIu64 definition.
* 2005-05-13, prelude-manager-0.9.0-rc4:
- Make filter option handling more consistant.
- Fix recursive analyzer routing, endianess issue.
- Error return triggered by option beautification.
- More detailed error messages.
- Option priority re-ordering.
- Decrease verbosity level.
* 2005-04-17, prelude-manager-0.9.0-rc3:
- Don't declare the client to be a reader until we get to the capability message.
This way, if the user get permission wrong (applying more permission than needed),
only client hardwired permission apply.
- Fix memory leak.
* 2005-04-09, prelude-manager-0.9.0-rc2:
- Xmlmod fixes.
- Change analyzer class from "Manager" to "Concentrator"
- Better database plugin error reporting.
- Fix an error when starting the database plugin from command line.
- Safe filter plugin destroy hook.
- Relaying plugin now provide a destroy hook.
- Fix IRIX & OpenBSD compilation.
- Direct GnuTLS CFLAGS handling.
* 2005-03-29, prelude-manager-0.9.0-rc1:
Note: due to several years of work and the habit of working with the
new version, it is hard to remind all the enhancement made in this release.
Please bear with us and try it for yourself :-)
- Clients using libprelude can now request copies of alert from a
Manager. Additionally, Prelude-Manager will backup alerts received
while a 'querying' analyzer was offline and emit them when it reconnect.
- New access control system, allowing to specify the type of operation a
given client is allowed to do.
- Support failover at the Report plugin level, allowing for example to setup
a fallback if one of the report plugin fail (example: if the database used
by a report plugin goes down).
- Improved scheduler fairness across different sensors.
- Use ephemeral Diffie Hellman parameters.
- Allow loading of multiple instances of the same plugin, your Manager can now
report to an unlimited number plugin instances (example: you can now have multiple
database).
- Modular filtering system, allowing to define IDMEF criteria, and to bind action
to be issued when an event match these rules.
- Use libpreludedb.
- Ipv6 support.
- Enhanced portability (Should now build successfully on architecture such as Tru64/AIX).
- Support plugin dl-preopening on platform without dlopen() or dlsym().
* 2003-12-09, prelude-manager-0.8.10:
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
Fix logfile creation permission.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
- Nicolas Delon <delon.nicolas@wanadoo.fr> :
Workaround a bug in SSL mode that could introduce
an alert processing delay because OpenSSL use it's own
data buffering.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
Add missing COPYING.OpenSSL file.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
- Nicolas Delon <delon.nicolas@wanadoo.fr> :
Fixed a bug preventing the manager from being ran as a
normal user without manual permission customisation.
* 2003-10-22, prelude-manager-0.8.9
- James Horvath <james.horvath@steelcase.com>:
Fix an occasional SIGSEGV due to a NULL pointer dereference
when using the pgsql database plugin.
* 2003-09-21, prelude-manager-0.8.8
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
- Laurent Pautet <landmir@landmir.net>:
Avoid inserting quoted NULL entry in database, which the
query client would interpret as being valid.
- Fabrice Alphonso <fabrice@alphonso.dyndns.org>:
Fix Pgsql database creation script (the user was created,
but the table were not).
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
Use LOG_ERR in MySQL plugin to tell the user that connection information
are missing. Some user were confused by thinking the output
looked okay, and didn't thought it was an error.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
Fix insertion of correlated alert.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
Fix a crash in the Xml plugin, on system using libxml 2.5.8.
- Laurent Pautet <landmir@landmir.net>:
Try to speed up DB access by setting up some INDEX.
- Laurent Pautet <landmir@landmir.net>:
A space was missing in inserted timestamp. only worked for
MySQL 3.2x to 4.0.x, not for MySQL 4.1.x nor PostgreSQL
(fix bug #84).
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
- Krzysztof Zaraska <kzaraska@student.uci.agh.edu.pl>:
Bring the "keepalive" and "prompt" option to the
manager-adduser program.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
We are now able to accept both Ipv6 and Ipv4 connection.
- Sylvain Gil <prelude-code@tootella.org>:
MacosX port.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
Added support for dumping ECNECHO and CWR flags when
they are set in the prelude-nids decoding plugin.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
Fix a bug were ip_len would always be dumped as being 0
in the prelude-nids decoding plugin.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
Fix a possible assertion failure in the Passive OS Fingerprinting
code.
* 2003-04-28, prelude-manager-0.8.7
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
Update server-logic code. This newer version fix every known
bug and race (was tested on an heavily loaded IRC server).
- Nicolas Delon <delon.nicolas@wanadoo.fr>:
UTC time was used to build the string instead of localtime.
GMT offset was badly calculated (using tm_hour field of struct tm).
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
You can now provide a prefix for pgsql, mysql, and xml2.
Fix bug #0000070 ("Problems with the --enable-pgsql configuration
options").
- Patrick Marie <mycroft@virgaria.org>:
Fixed bug #0000072 and part of #0000073: Full rewrite of the
PostgreSQL database/user/tables creation.
- Patrick Marie <mycroft@virgaria.org>:
Fixed bug #0000074 : "prelude-manager-db-create.sh doesn't
work with FreeBSD. /bin/sh. Multi conditionnal "if" in test(1)
are not supported, neither [[ ]] syntax."
- Michael Boman <michael.boman@securecirt.com>:
Fixed bug #0000073 : "prelude-manager-db-create.sh can only
use local databases".
- Michael Boman <michael.boman@securecirt.com>:
Both mysql and pgsql now have a new command line option to assign
port number : dbport. Now works with MySQL v4.0+.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
- Laurent Oudot <oudot.laurent@wanadoo.fr>:
Implement passive os fingerprint, adding a fingerprint to the
alert additional data.