Subject: CVS commit: pkgsrc/security/prelude-lml
From: John R. Shannon
Date: 2006-01-31 11:46:31
Message id: 20060131104631.2DB3B2DA27@cvs.netbsd.org

Log Message:
Update to 0.9.2. Changes:
- Get rid of the 1024 characters per line limitation (defined as per
  the syslog RFC), since LML is not limited to parsing input from syslog
  anymore.
- Handle events in Clamav logging format as well as syslog.
- Abstracted Squid chain regex to allow parsing of data directly
  from Squid log files.
- Introduced support for openhostapd.
- Began expanding rulesets with additional_data and vendor-specific
  classification data.
- Various ruleset updates and bug fixes.

Prelude-LML is a signature based log analyzer monitoring logfile and
received syslog messages for suspicious activity. It handle events
generated by a large set of components, including but not limited to:
BigIP, Grsecurity, Honeyd, ipchains, Netfilter, ipfw, Nokia ipso,
Nagios, Norton Antivirus Corporate Edition, NTsyslog, PAM, Portsentry,
Postfix, Proftpd, ssh, etc.

Files:
RevisionActionfile
1.2modifypkgsrc/security/prelude-lml/Makefile
1.2modifypkgsrc/security/prelude-lml/distinfo
1.2modifypkgsrc/security/prelude-lml/files/preludelml.sh