1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799 800 801 802 803 804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851 852 853 854 855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880 881 882 883 884 885 886 887 888 889 890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917 918 919 920 921 922 923 924 925 926 927 928 929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946 947 948 949 950 951 952 953 954 955 956 957 958 959 960 961 962 963 964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987 988 989 990 991 992 993 994 995 996 997 998 999 1000 1001 1002 1003 1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015 1016 1017 1018 1019 1020 1021 1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032 1033 1034 1035 1036 1037 1038 1039 1040 1041 1042 1043 1044 1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055 1056 1057 1058 1059 1060 1061 1062
|
* 2020-09-09, prelude-manager-5.2.0:
No new changes.
* 2020-08-04, prelude-manager-5.2.0rc2:
Author: Antoine Luong
- Change company name
- Fix script execution plugin
* 2020-07-23, prelude-manager-5.2.0rc1:
* 2020-06-30, prelude-manager-5.2.0beta2:
No new changes.
* 2020-06-19, prelude-manager-5.2.0beta1:
Author: Yoann Vandoorselaere
- Add relaying and reverse relaying plugin
- Add script execution plugin
- Use a bufpool for reverse relaying
- Properly restore buffer pool state
- Fix possible deadlock with multiple thread evicting
Author: Francois Poirotte
- Add SNMP traps plugin
* 2019-09-13, prelude-manager-5.1.0:
No new changes.
* 2019-09-04, prelude-manager-5.1.0rc1:
Author: Antoine Luong
- Remove unused SELinux rules
* 2019-07-17, prelude-manager-5.1.0beta1:
Author: Yoann Vandoorselaere
- Revert "Correct AdditionalData output"
* 2019-03-15, prelude-manager-5.1.0alpha1:
Author: Antoine Luong
- Fix typo in config file
* 2018-09-07, prelude-manager-5.0.0:
Author: Antoine Luong
- Update GnuLib code
* 2018-08-17, prelude-manager-5.0.0rc1:
Author: Yoann Vandoorselaere
- Memory corruption fixes
* 2018-05-04, prelude-manager-5.0.0beta2:
Author: Song Tran
- Add SELinux policies
* 2018-04-13, prelude-manager-5.0.0beta1:
Author: Antoine Luong
- Update GnuLib code
* 2018-02-09, prelude-manager-4.2.0rc1:
Author: Thomas Andrejak
- Remove old references to relaying
Author: Antoine Luong
- Do not return negative value on db_run success
* 2017-07-21, prelude-manager-4.1.0:
No new changes.
* 2017-07-13, prelude-manager-4.1.0rc2:
Author: Yoann Vandoorselaere
- Update GnuLib code
* 2017-06-30, prelude-manager-4.1.0rc1:
No new changes.
* 2017-06-23, prelude-manager-4.1.0beta2:
Author: Yoann Vandoorselaere
- Fix possible crash when tls-options is set to NONE
* 2017-06-16, prelude-manager-4.1.0beta1:
Author: Yoann Vandoorselaere
- SMTP plugin is now asynchronous
This prevent locking Manager main worker thread.
However, SMTP plugin failover is not supported anymore.
- Migrate IDMEF message scheduler to libev
- Release lock while executing timer
Prevent server thread stall in the boggus case
where timer execution is itself stalled.
* 2017-02-16, prelude-manager-4.0.0:
Author: Yoann Vandoorselaere
- prelude-manager heartbeat did not assign messageid
* 2017-02-12, prelude-manager-4.0.0rc3:
* 2017-02-03, prelude-manager-4.0.0rc2:
* 2017-01-27, prelude-manager-4.0.0rc1:
No new changes.
* 2017-01-12, prelude-manager-4.0.0beta2:
Author: Yoann Vandoorselaere
- Update GnuLib/libev code
- Get rid of libgcrypt
* 2016-12-23, prelude-manager-4.0.0beta1:
No new changes.
* 2016-09-14, prelude-manager-3.1.0:
No new changes.
* 2016-09-01, prelude-manager-3.1.0rc3:
Author: Thomas Andrejak
- Rename --with-libwrap-prefix to --with-libwrap
Author: Song Tran
- Add SELinux policy for Unix socket connection
* 2016-08-19, prelude-manager-3.1.0rc2:
Author: Thomas Andrejak
- Fix configure for --enable-libmaxminddb
- Fix configure for --with-libwrap-prefix=yes
* 2016-08-05, prelude-manager-3.1.0rc1:
Author: Thomas Andrejak
- Allow the libev on system to be used
Thanks to Gokturk Yuksek <gokturk@gentoo.org>
- Rename configure.in to configure.ac
Author: Yoann Vandoorselaere
- Reverse relaying code fixes / performance improvements
- Reduce per connection memory footprint
- Use hash-table for analyzerid->client lookup performance
- Reading events from multiple agents using the same analyzerid now works (even though it is not advised)
- Update libev and GnuLib code
- Fix possible debug and smtp plugins assertions
- Fix memory corruption with multiple reverse relay
- Fix double free in case of failover saving error
- Prevent some geoip warnings
Author: Antoine Luong
- Fix assertion errors in thresholding plugin
* 2016-04-22, prelude-manager-3.0.0:
No new changes.
* 2016-04-15, prelude-manager-3.0.0rc4:
Author: Antoine Luong
- Prevent a segfault in write_connection_cb()
* 2016-04-08, prelude-manager-1.3.0rc3:
Author: Song Tran
- Add aditional SELinux policy
* 2016-04-01, prelude-manager-1.3.0rc2:
Author: Camille Gardet
- Add info about geolocation support
* 2016-03-25, prelude-manager-1.3.0rc1:
Author: Louis-David Gabet
- Replace stderr by /dev/stdout in configuration
* 2016-03-18, prelude-manager-1.3.0beta2:
Author: Song Tran
- Additional SELinux policies
Author: François Poirotte
- Add a default threshold to handle bursts
* 2016-03-01, prelude-manager-1.3.0beta1:
Author: Yoann Vandoorselaere
- Event geo-location support through normalisation
Implement support for libmaxminddb, allowing to set per-event geolocation
information within events AdditionalData.
Author: Song Tran
- Add SELinux policies
Author: Thomas Andrejak
- Change prelude-ids.com to prelude-siem.com
* 2016-01-11, prelude-manager-1.3.0alpha1:
Author: Antoine Luong
- [#640] Fix libpreludedb compatibility issue in SMTP plugin
- Update Prewikka path in SMTP template
* 2015-07-31, prelude-manager-1.2.6:
No new changes.
* 2015-07-27, prelude-manager-1.2.6rc5:
Author: Yoann Vandoorselaere
- Make sure we listen on all interface (IPv4+IPv6 dual stack fixes)
* 2014-10-15, prelude-manager-1.2.6rc3:
Author: Yoann Vandoorselaere
- Use --lgpl=2 when invoking GnuLib, remove obsolete GnuLib files
- Correct AdditionalData output
* 2014-09-23, prelude-manager-1.2.6rc2:
Author: Yoann Vandoorselaere
- Update libev code
- Update GnuLib code
- Use PKCS3 format rather than binary form for writing Diffie-Hellman parameters.
- Use system defined SOMAXCONN, increase replacement value
* 2014-07-07, prelude-manager-1.2.5:
- Removed rhel6 packaging
- Update libev
- Warning fixes
- Autoconf / Automake fixes, Update GnuLib code
Configure script generation and make distcheck work again.
Remove deprecated autoconf macro, update obsolete one.
- Relaying cleanup
* 2012-06-13, prelude-manager-1.0.2:
- Changed copyrights
- Added packaging for rhel6
- Relaying functions have been transfered to the Enterprise Edition
* 2010-10-26, prelude-manager-1.0.1:
- An infinite loop was possible on insertion of an event whose length was
higher than the 'on disk threshold' value in the processing queue. Closes #385.
- Fix prelude-string warning in case of a NULL IDMEF impact description: this
is an optional element. Closes #376.
* 2010-03-16, prelude-manager-1.0.0:
- Minor changes since rc1.
* 2010-01-29, prelude-manager-1.0.0rc1:
- Upgrade to libev 3.9
- Use pkg-config for GnuTLS detection, as required by recent GnuTLS
version.
- Various bug fixes.
* 2009-07-10, prelude-manager-0.9.15:
- Make Prelude-Manager thread backend independant.
- Add missing dlpreopening support for the SMTP plugin.
- Win32 compilation fixes.
- Various fixes and update.
* 2008-08-21, prelude-manager-0.9.14.2:
- Various build fixes (#306).
* 2008-07-29, prelude-manager-0.9.14.1:
- Correctly define HAVE_LIBPRELUDEDB, so that more SMTP plugin
features are enabled.
* 2008-07-18, prelude-manager-0.9.14:
- Improve thread safety when evicting events to disk.
- Handle IDMEF message version tag, which will be used in upcoming
libprelude version.
- Add support for newer GnuTLS 2.2.0 session priority functions. When
the option is available, the user might specify TLS settings through
the "tls-options" configuration entry.
- Fix a possible crash upon destruction of a bufpool that is writing to
a failover.
- Correct strtoul() error checking, when verifying scheduler options.
* 2008-04-28, prelude-manager-0.9.13:
- Update libev, and GnuLib code.
- The commercial Prelude-Manager-SMTP plugin is now open-sourced, and
included within the Prelude-Manager tarball!
* 2008-04-28, prelude-manager-0.9.12.1:
- Update libev, and GnuLib code.
* 2008-04-01, prelude-manager-0.9.12:
- Use libev in place of the server-logic architecture: libev provides
the most scalable event notification mechanism available on a given
operating system.
- New connection-timeout option, governing the maximum number of
seconds a client might take to authenticate (default: 10 seconds).
- Fix a possible file descriptor leak on connection closure error.
- Massive cleanup of the build process, enable RELRO when possible.
- Fix a number of potential race in the reverse relaying code.
- When reverse relaying messages, encode the same message once for all
recipients: this improve performance with more than one reverse
relaying client (was a long time FIXME).
- Libev introduction also fix a rare issue where server-logic would not
notice a dead connection.
* 2008-02-07, prelude-manager-0.9.11.2:
- Missing config.h inclusion, leading to GnuLib module compilation failure
on some architecture (Solaris). Fix #278.
* 2008-02-06, prelude-manager-0.9.11.1:
- Add missing strsep module from GnuLib, fix build failure on architecture
missing strsep (Solaris). Fix #277.
* 2008-02-05, prelude-manager-0.9.11:
- In case a lot of message were being processed, the heartbeat timer
could be delayed for a long period of time.
- The old scheduler algorithm could be unfair when certain message priority
were not available for processing. We now appropriatly handle repartition
to others priority messages.
- Message of the same priority could be processed in the wrong order when
on-disk buffers were used.
- No integrity check were performed on orphan on-disk buffer in case of an
operating system crash. By using the prelude-failover API, we can now
detect possibly corrupted disk buffer, or resume at the time we stopped
recovering them.
- New sched-priority and sched-buffer-size configuration options.
- Fix a bug where several relaying plugin instance would only forward
their message to a single Manager.
* 2007-10-02, prelude-manager-0.9.10:
- Make threshold act like a real threshold: pass every Nth events
in the defined amount of seconds.
- Allow mixing Limit and Threshold.
- Do not share the tresholding hash accross thresholding plugin instance:
previously, the shared hash would result in strange thresholding plugin
behavior if you had several instance of thresholding loaded.
- Various bug fixes concerning plugin instance un-subscribtion (unsubscribtion
of certain plugin was not triggered).
* 2007-09-23, prelude-manager-0.9.9.1:
- Fix for new libprelude (0.9.15) runtime warning.
- Add documentation for SQLite3 in the template configuration file
(Sébastien Tricaud <toady at gscore.org>).
* 2007-08-03, prelude-manager-0.9.9:
- Update configuration template, add documentation for Prelude
generic TCP options.
- Implement modified patch from Pierre Chifflier <chifflier@inl.fr>
to fix the example log path (fix #224).
- Move IDMEF message normalization in the scheduler, rather than
doing it upon reception. This remove some load from the server
and allow Prelude-Manager own IDMEF messages to go through the
normalizer path.
- Implement heartbeat->analyzer normalization.
- Improve IPv4 / IPv6 address normalization.
IPv4 mapped IPv6 addresses are now mapped back to IPv4.
Additionally, the Normalize plugin now provide two additionals option:
ipv6-only: Map any incoming IPv4 address to IPv6.
keep-ipv4-mapped-ipv6: do not map IPv4 mapped IPv6 addresses back to IPv4.
- Make a difference between exceptional report plugin failure (example:
a single message couldn't be processed) and "global" plugin failure
(example: database server is down). We use a different failover for
'exceptional' failure, so that we don't try to reinsert a bogus message
(fix #247).
- Start of a Prelude-Manager manpages (#236).
- Various bug fixes.
* 2007-05-02, prelude-manager-0.9.8:
- Initial implementation of the 'thresholding' plugin, allowing you to
suppress events after a certain limit/threshold.
- Filters hooking to a reporting plugin are now OR'ed instead of being
AND'ed. AND is already possible by hooking filtering plugin one with
another.
- Improved error reporting.
- Minor bug fixes.
* 2007-03-16, prelude-manager-0.9.7.2:
- Allow filtering plugins to hook others filters plugins.
- Update reporting code to latest specification for the SNMPService class.
- Warn about Un-handled command line arguments.
- Properly dump IDMEF-XML output (fix #186).
- Various bug fixes.
* 2006-12-21, prelude-manager-0.9.7.1:
- Fix compilation issue on system where ferror is not declared as a function,
regression introduced in 0.9.7 (#186).
* 2006-12-20, prelude-manager-0.9.7:
- Fix a startup problem on system with different address of different family
mapping to the same IP.
- Fix for system using the GnuLib poll replacement modules. The module was
broken when used in conjunction with server socket.
- Various portability fixes (this release should compile and run on OSX out of the box).
* 2006-10-04, prelude-manager-0.9.6.1:
- Fix possible undefined reference to GnuLib symbols.
- Verbose error message in case of Authentication initialization failure.
* 2006-08-24, prelude-manager-0.9.6:
- In case an IDMEF-Service object contain neither name or port
attribute, set name to "unknown" in order to avoid IDMEF DTD
validation issue.
- Normalize analyzer(*).node.
- Fix OpenBSD getaddrinfo() problem.
* 2006-06-14, prelude-manager-0.9.5:
- Store Prelude-Manager FIFO into the profile backup directory so that FIFO
are per profile. Fix #151.
- Update libwrap check, don't statically link libwrap. Cleanup. Fix #144.
- XMLmod: Implement CorrelationAlert processing.
- XMLmod: No ntpstamp attribute in File/Inode element datetime fields.
- XMLmod: permission -> Permission, as per IDMEF DTD requirements.
- XMLmod: Process the Checksum IDMEF element.
- XMLmod: Make AdditionalData validation pass (IDMEF v15 -> v16 change).
- XMLmod: disable-buffering option argument is optional.
- XMLmod: Correct DTD loading error.
- XMLmod: Avoid NULL libxml warning.
* 2006-03-28, prelude-manager-0.9.4.1:
- Enable write notification on queued write (Fix reverse relaying).
- Fix IDMEF message scheduler warning when plugin failover is enabled.
* 2006-03-17, prelude-manager-0.9.4:
- Fix reverse relaying on some architecture due to thread safety
issue.
- Server scalability improvement in case of message burst.
- Start work on a normalization plugin. Very simple for now, mostly
sanitize IDMEF Address and IDMEF Service classes.
- When an analyzer have read and write permission to prelude-manager,
avoid acting as an echo server, don't send received message from this
analyzer to itself.
- When no listen address is specified, try to bind all
system address (both ipv4/ipv6).
- Send an alert to the peer on handshake failure, so that
the peer have some information on what happened.
- Consistency work accross all plugin logfile option.
- Various bug fixes and improvements.
* 2006-02-09, prelude-manager-0.9.3:
- Only send TLS alert if there is one queued, fix a possible crash.
- Emit warning if prelude-failover problem arise.
- Improve error handling.
- Improve db plugin log option, "-" now mean stdout.
- Various bug fixes.
* 2006-01-30, prelude-manager-0.9.2:
- Allow "file" configuration settings to be set from the
database plugin, to handle file based database (SQLite).
- prelude-manager has been updated to check the loaded revocation
list, if available. This was needed since the recent prelude-adduser
addition allowing to create analyzer revocation list.
- Remove line size limitation on specified IDMEF-criteria.
- Remove all ancillary groups as well as setgid-ing.
- Fix idmef-criteria-filter option conflict.
- Fix a possible crash if no listen address is specified, but a
reverse relay is used.
- Much better error reporting.
* 2005-11-14, prelude-manager-0.9.1:
- Ability to listen on multiple IP address.
- Fix possible race condition with per-sensor queue creation.
- Fix orphaned disk queues that could remain un-flushed in case
of incorrect Manager shutdown.
- Cleanup.
* 2005-09-20, prelude-manager-0.9.0:
- 0.9.0 final.
- Improve error reporting.
- Fix failover on relaying.
- Fix warnings.
* 2005-08-17, prelude-manager-0.9.0-rc8:
- Re-establish signal handler for older Unix.
- New user/group configuration option, that might be used so
that prelude-manager, if started as root, drop privilege.
- Change from old port number (5554) to IANA assignated port number
for Prelude (4690).
* 2005-08-01, prelude-manager-0.9.0-rc7:
- Allocate an unique instance ID per connecting analyzer. Allow
to make the difference between two parallel connection from the
same analyzer.
- FD_CLOEXEC on opened fd: Fix file descriptor leak on SIGHUP.
* 2005-07-01, prelude-manager-0.9.0-rc6:
- Correct textmod printing of microseconds.
- Check permission on startup and refuse to start if there
is a problem. Should prevent some users mistake.
- Fix problem with Xmlmod handling of text data (was creating
problem in case they contained the & character).
- More detailed error messages.
- GCC4 warnings fixes & 64bits platform warnings fixes.
More C89 compliance.
* 2005-05-26, prelude-manager-0.9.0-rc5:
- Fix leak on local configuration message.
- Default to listening on localhost instead of UNIX domain socket.
- Fix compilation problem on system lacking PRIu64 definition.
* 2005-05-13, prelude-manager-0.9.0-rc4:
- Make filter option handling more consistant.
- Fix recursive analyzer routing, endianess issue.
- Error return triggered by option beautification.
- More detailed error messages.
- Option priority re-ordering.
- Decrease verbosity level.
* 2005-04-17, prelude-manager-0.9.0-rc3:
- Don't declare the client to be a reader until we get to the capability message.
This way, if the user get permission wrong (applying more permission than needed),
only client hardwired permission apply.
- Fix memory leak.
* 2005-04-09, prelude-manager-0.9.0-rc2:
- Xmlmod fixes.
- Change analyzer class from "Manager" to "Concentrator"
- Better database plugin error reporting.
- Fix an error when starting the database plugin from command line.
- Safe filter plugin destroy hook.
- Relaying plugin now provide a destroy hook.
- Fix IRIX & OpenBSD compilation.
- Direct GnuTLS CFLAGS handling.
* 2005-03-29, prelude-manager-0.9.0-rc1:
Note: due to several years of work and the habit of working with the
new version, it is hard to remind all the enhancement made in this release.
Please bear with us and try it for yourself :-)
- Clients using libprelude can now request copies of alert from a
Manager. Additionally, Prelude-Manager will backup alerts received
while a 'querying' analyzer was offline and emit them when it reconnect.
- New access control system, allowing to specify the type of operation a
given client is allowed to do.
- Support failover at the Report plugin level, allowing for example to setup
a fallback if one of the report plugin fail (example: if the database used
by a report plugin goes down).
- Improved scheduler fairness across different sensors.
- Use ephemeral Diffie Hellman parameters.
- Allow loading of multiple instances of the same plugin, your Manager can now
report to an unlimited number plugin instances (example: you can now have multiple
database).
- Modular filtering system, allowing to define IDMEF criteria, and to bind action
to be issued when an event match these rules.
- Use libpreludedb.
- Ipv6 support.
- Enhanced portability (Should now build successfully on architecture such as Tru64/AIX).
- Support plugin dl-preopening on platform without dlopen() or dlsym().
* 2003-12-09, prelude-manager-0.8.10:
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
Fix logfile creation permission.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
- Nicolas Delon <delon.nicolas@wanadoo.fr> :
Workaround a bug in SSL mode that could introduce
an alert processing delay because OpenSSL use it's own
data buffering.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
Add missing COPYING.OpenSSL file.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
- Nicolas Delon <delon.nicolas@wanadoo.fr> :
Fixed a bug preventing the manager from being ran as a
normal user without manual permission customisation.
* 2003-10-22, prelude-manager-0.8.9
- James Horvath <james.horvath@steelcase.com>:
Fix an occasional SIGSEGV due to a NULL pointer dereference
when using the pgsql database plugin.
* 2003-09-21, prelude-manager-0.8.8
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
- Laurent Pautet <landmir@landmir.net>:
Avoid inserting quoted NULL entry in database, which the
query client would interpret as being valid.
- Fabrice Alphonso <fabrice@alphonso.dyndns.org>:
Fix Pgsql database creation script (the user was created,
but the table were not).
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
Use LOG_ERR in MySQL plugin to tell the user that connection information
are missing. Some user were confused by thinking the output
looked okay, and didn't thought it was an error.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
Fix insertion of correlated alert.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
Fix a crash in the Xml plugin, on system using libxml 2.5.8.
- Laurent Pautet <landmir@landmir.net>:
Try to speed up DB access by setting up some INDEX.
- Laurent Pautet <landmir@landmir.net>:
A space was missing in inserted timestamp. only worked for
MySQL 3.2x to 4.0.x, not for MySQL 4.1.x nor PostgreSQL
(fix bug #84).
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
- Krzysztof Zaraska <kzaraska@student.uci.agh.edu.pl>:
Bring the "keepalive" and "prompt" option to the
manager-adduser program.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
We are now able to accept both Ipv6 and Ipv4 connection.
- Sylvain Gil <prelude-code@tootella.org>:
MacosX port.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
Added support for dumping ECNECHO and CWR flags when
they are set in the prelude-nids decoding plugin.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
Fix a bug were ip_len would always be dumped as being 0
in the prelude-nids decoding plugin.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
Fix a possible assertion failure in the Passive OS Fingerprinting
code.
* 2003-04-28, prelude-manager-0.8.7
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
Update server-logic code. This newer version fix every known
bug and race (was tested on an heavily loaded IRC server).
- Nicolas Delon <delon.nicolas@wanadoo.fr>:
UTC time was used to build the string instead of localtime.
GMT offset was badly calculated (using tm_hour field of struct tm).
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
You can now provide a prefix for pgsql, mysql, and xml2.
Fix bug #0000070 ("Problems with the --enable-pgsql configuration
options").
- Patrick Marie <mycroft@virgaria.org>:
Fixed bug #0000072 and part of #0000073: Full rewrite of the
PostgreSQL database/user/tables creation.
- Patrick Marie <mycroft@virgaria.org>:
Fixed bug #0000074 : "prelude-manager-db-create.sh doesn't
work with FreeBSD. /bin/sh. Multi conditionnal "if" in test(1)
are not supported, neither [[ ]] syntax."
- Michael Boman <michael.boman@securecirt.com>:
Fixed bug #0000073 : "prelude-manager-db-create.sh can only
use local databases".
- Michael Boman <michael.boman@securecirt.com>:
Both mysql and pgsql now have a new command line option to assign
port number : dbport. Now works with MySQL v4.0+.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
- Laurent Oudot <oudot.laurent@wanadoo.fr>:
Implement passive os fingerprint, adding a fingerprint to the
alert additional data.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
Fix a bug pointed out by Laurent Oudot <oudot.laurent@wanadoo.fr>,
where packet dumped wouldn't show the DF (Don't Fragment) flag.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
Fix some bug in ARP packet dump.
- Krzysztof Zaraska <kzaraska@student.uci.agh.edu.pl>:
Allow the use of an arbitrary length certificate buffer.
- Yoann Vandoorselaere <yoann@prelude-ids.org>:
Permit linking with OpenSSL so that Debian package might
be distributed.
- Sylvain Gil <prelude-code@tootella.org>:
Added a -d option to the XML plugin that will disable file
buffering for xml output file.
* 2002-09-23, prelude-manager-0.8.6:
- Fix a communication problem on linux kernel 2.2.x
due to the non standard compliant poll() implementation.
(Yoann Vandoorselaere).
- Fix server-logic thread cancelation.
(Yoann Vandoorselaere).
- Add missing field in mysql / pgsql database schema.
(Yoann Vandoorselaere).
- Fix a FreeBSD compilation problem in the XML reporting plugin.
(Krzysztof Zaraska, Yoann Vandoorselaere).
* 2002-09-10, prelude-manager-0.8.5:
- Fix possible heartbeat insertion problem.
(Yoann Vandoorselaere)
* 2002-09-02, prelude-manager-0.8.4:
- New XML reporting plugin, to report alert in IDMEF-XML.
This support dumping to a file, stderr. And might be used
to check the message against the IDMEF-XML DTD.
(Yoann Vandoorselaere).
- correct OpenSSL, PgSQL, MySQL detection.
(Yoann Vandoorselaere).
* 2002-08-26, prelude-manager-0.8.3:
- Fix off by one error in dynamic database query generation (Yoann Vandoorselaere).
- Textmod plugin formatting fix (Yoann Vandoorselaere).
- Handle message containing inode information (Yoann Vandoorselaere).
- Fix memory leak in PostgreSQL plugin (Krzysztof Zaraska).
- More detailed MySQL error messages (Krzysztof Zaraska).
- Avoid potentially missing \0 on really long filename (Guillaume Pelat).
* 2002-08-01, prelude-manager-0.8.2:
- Fix possible MySQL plugin compilation problem (Yann Droneaud).
* 2002-08-01, prelude-manager-0.8.1:
- Compile again on FreeBSD-STABLE (Krzysztof Zaraska).
|