Commit graph

16 commits

Author SHA1 Message Date
shannonjr
91a5def025 Update to 0.9.6. Changes:
- In case an IDMEF-Service object contain neither name or port
  attribute, set name to "unknown" in order to avoid IDMEF DTD
  validation issue.
- Normalize analyzer(*).node.
2006-08-24 16:10:12 +00:00
wiz
e773592447 Add master site entry for times when pkgsrc doesn't have the completely
latest version.
2006-08-23 18:51:56 +00:00
shannonjr
d97b1f6677 Change CONF_FILES_PERMS from 0600 to 0644 because conf file must be
accessible to prelude-manager running as non-root user. Bumped PKGREVISION.
2006-08-23 11:54:24 +00:00
shannonjr
f2d2fbcc28 prelude-manager references two configuration directories relative to
PKG_SYSCONFDIR: 1) prelude-manager and 2) prelude (install by libprelude).
Consequently, PKG_SYSCONFSUBDIR can't be set to prelude-manager.
Corrected and PKGREVISION bumped.
2006-08-23 11:19:58 +00:00
joerg
95b1c585e0 Forgotten patchsum update. 2006-07-01 17:26:47 +00:00
joerg
346cf857e5 Use config file framework. Keep the permission of the original code
for the installed version of the configuration file, but not the
example. Bump revision.
2006-06-28 17:05:50 +00:00
shannonjr
32e95bcd54 Update to 0.9.5. Changes:
- Store Prelude-Manager FIFO into the profile backup directory so that FIFO
  are per profile. Fix #151.
- Update libwrap check, don't statically link libwrap. Cleanup. Fix #144.
- XMLmod: Implement CorrelationAlert processing.
- XMLmod: No ntpstamp attribute in File/Inode element datetime fields.
- XMLmod: permission -> Permission, as per IDMEF DTD requirements.
- XMLmod: Process the Checksum IDMEF element.
- XMLmod: Make AdditionalData validation pass (IDMEF v15 -> v16 change).
- XMLmod: disable-buffering option argument is optional.
- XMLmod: Correct DTD loading error.
- XMLmod: Avoid NULL libxml warning.
2006-06-16 09:45:35 +00:00
shannonjr
f9aa6e877e Added additional environment cleanup before exec'ing prelude-manager. 2006-05-26 11:43:42 +00:00
shannonjr
543bc0b0f6 Update to 0.9.4.1. Changes:
- Enable write notification on queued write (Fix reverse relaying).
- Fix IDMEF message scheduler warning when plugin failover is enabled.
- Fix reverse relaying on some architecture due to thread safety
  issue.
- Server scalability improvement in case of message burst.
- Start work on a normalization plugin. Very simple for now, mostly
  sanitize IDMEF Address and IDMEF Service classes.
- When an analyzer have read and write permission to prelude-manager,
  avoid acting as an echo server, don't send received message from this
  analyzer to itself.
- When no listen address is specified, try to bind all
  system address (both ipv4/ipv6).
- Send an alert to the peer on handshake failure, so that
  the peer have some information on what happened.
- Consistency work accross all plugin logfile option.
- Various bug fixes and improvements.
2006-04-24 10:43:44 +00:00
jlam
802ce74fcb Modify packages that set PKG_USERS and PKG_GROUPS to follow the new
syntax as specified in pkgsrc/mk/install/bsd.pkginstall.mk:1.47.
2006-04-23 00:12:35 +00:00
wiz
35af66a196 Belatedly bump PKGREVISION for all libtasn1 dependencies, since
libtasn1 had a shlib major bump.
Also update dependencies in bl3.mk files.

Addresses PR 32998 by Robert Elz.
2006-03-06 00:18:10 +00:00
joerg
9d87c73a0e Include sys/time.h before sys/resource.h to fix build on DragonFly. 2006-02-16 18:31:06 +00:00
shannonjr
2de4fb3c5f Update to 0.9.3. Changes:
- Only send TLS alert if there is one queued, fix a possible crash.
- Emit warning if prelude-failover problem arise.
- Improve error handling.
- Improve db plugin log option, "-" now mean stdout.
- Various bug fixes.
2006-02-09 11:01:57 +00:00
joerg
5911def816 Recursive revision bump / recommended bump for gettext ABI change. 2006-02-05 23:08:03 +00:00
shannonjr
9a8296d666 Update to 0.9.2. Changes:
- prelude-manager has been updated to check the loaded revocation
  list, if available. This was needed since the recent prelude-adduser
  addition allowing to create analyzer revocation list.
- Remove line size limitation on specified IDMEF-criteria.
- Remove all ancillary groups as well as setgid-ing.
- Fix idmef-criteria-filter option conflict.
- Fix a possible crash if no listen address is specified, but a
  reverse relay is used.
- Much better error reporting.
Prelude-Manager is a high availability server that accepts secured
connections from distributed sensors or other managers and saves
received events to a media specified by the user (database, logfile,
mail, etc).
2006-01-31 17:54:10 +00:00
shannonjr
cc0f1ca830 Prelude is a hybrid IDS consisting of multiple
sensors, managers, and a display console. This
is the manager. The Manager (there can be several
in an IDS network) accepts secured connections
from sensors and saves the alerts that Sensors
emit. This package installs the manager so that
mySql is used for alert storage.

This is one of several new Prelude packages.
2006-01-29 15:57:49 +00:00