pkgsrc/security/prelude-correlator/distinfo

$NetBSD: distinfo,v 1.5 2010/03/23 18:01:47 joerg Exp $

SHA1 (prelude-correlator-0.9.0-beta8.tar.gz) = 962f3c899ed01b9a0efc1368687d6a914e176c73
RMD160 (prelude-correlator-0.9.0-beta8.tar.gz) = 9ed8e35357ba1bbe6a09c6cb906df28d4f84e347
Size (prelude-correlator-0.9.0-beta8.tar.gz) = 179713 bytes
SHA1 (patch-aa) = f6641b5a19d504716dcb51a2d1ec905fed7967f9
Install data files to share/examples to make sure they end up in the binary package. Fixes DESTDIR installation at the same time. Bump revision. 2010-03-23 19:01:47 +01:00			$NetBSD: distinfo,v 1.5 2010/03/23 18:01:47 joerg Exp $
Prelude-Correlator serves to correlate, in real time, the multiple events received by Prelude. Several isolated alerts, generated from different probes, can thus trigger a single correlation alert should the events be related. This correlation alert then appears within the Prewikka interface and indicates the potential target information via the set of correlation rules. 2008-07-21 14:16:46 +02:00
Update to 0.9.0-beta8 (by Rumko via private mail). 0.9.0-beta8: - Include spamhaus_drop.dat in the source distribution. Fix installation issue (closes #364). 0.9.0-beta7: - Initial SpamhausDrop plugin implementation, by Wes Young <wes@barely3am.com> (closes #363) - Do not discard --root parameters if prefix is absolute. - Python 2.4 backward compatibility fixes. - Handle plugin loading error gracefully. - Improve WormPlugin accuracy, and make it carry a reference to the initial event. The plugin used to alert when seeing an alert to a given target, and this same alert going back to the source. This can happen in a number of case (example: Netbios alert triggered by Snort) As of now, the plugin will wait for the events to be repeated against at least 5 differents hosts. - Dshield CorrelationAlert now handle multiples events. Previously, we used to generate a single Dshield CorrelationAlert for each events where the source address would match the Dshield database. The plugin now generate CorrelationAlert for multiples events received from the same source. 2009-11-07 19:30:28 +01:00			`SHA1 (prelude-correlator-0.9.0-beta8.tar.gz) = 962f3c899ed01b9a0efc1368687d6a914e176c73`
			`RMD160 (prelude-correlator-0.9.0-beta8.tar.gz) = 9ed8e35357ba1bbe6a09c6cb906df28d4f84e347`
			`Size (prelude-correlator-0.9.0-beta8.tar.gz) = 179713 bytes`
Install data files to share/examples to make sure they end up in the binary package. Fixes DESTDIR installation at the same time. Bump revision. 2010-03-23 19:01:47 +01:00			`SHA1 (patch-aa) = f6641b5a19d504716dcb51a2d1ec905fed7967f9`