Path to this page:
Subject: CVS commit: pkgsrc/security/prelude-correlator
From: Hasso Tepper
Date: 2009-11-07 19:30:29
Message id: 20091107183029.32CA9175DD@cvs.netbsd.org
Log Message:
Update to 0.9.0-beta8 (by Rumko via private mail).
0.9.0-beta8:
- Include spamhaus_drop.dat in the source distribution. Fix installation
issue (closes #364).
0.9.0-beta7:
- Initial SpamhausDrop plugin implementation, by
Wes Young <wes@barely3am.com> (closes #363)
- Do not discard --root parameters if prefix is absolute.
- Python 2.4 backward compatibility fixes.
- Handle plugin loading error gracefully.
- Improve WormPlugin accuracy, and make it carry a reference to the
initial event. The plugin used to alert when seeing an alert to a
given target, and this same alert going back to the source. This can
happen in a number of case (example: Netbios alert triggered by Snort)
As of now, the plugin will wait for the events to be repeated against
at least 5 differents hosts.
- Dshield CorrelationAlert now handle multiples events. Previously, we
used to generate a single Dshield CorrelationAlert for each events
where the source address would match the Dshield database. The plugin
now generate CorrelationAlert for multiples events received from the
same source.
Files: