* 2005-03-29, prelude-manager-0.9.0-rc1: Note: due to several years of work and the habit of working with the new version, it is hard to remind all the enhancement made in this release. Please bear with us and try it for yourself :-) - Clients using libprelude can now request copies of alert from a Manager. Additionally, Prelude-Manager will backup alerts received while a 'querying' analyzer was offline and emit them when it reconnect. - New access control system, allowing to specify the type of operation a given client is allowed to do. - Support failover at the Report plugin level, allowing for example to setup a fallback if one of the report plugin fail (example: if the database used by a report plugin goes down). - Improved scheduler fairness across different sensors. - Use ephemeral Diffie Hellman parameters. - Allow loading of multiple instances of the same plugin, your Manager can now report to an unlimited number plugin instances (example: you can now have multiple database). - Modular filtering system, allowing to define IDMEF criteria, and to bind action to be issued when an event match theses rules. - Use libpreludedb. - Ipv6 support. - Enhanced portability (Should now build successfully on architecture such as Tru64/AIX). - Support plugin dl-preopening on platform without dlopen() or dlsym(). * 2003-12-09, prelude-manager-0.8.10: - Yoann Vandoorselaere : Fix logfile creation permission. - Yoann Vandoorselaere : - Nicolas Delon : Workaround a bug in SSL mode that could introduce an alert processing delay because OpenSSL use it's own data buffering. - Yoann Vandoorselaere : Add missing COPYING.OpenSSL file. - Yoann Vandoorselaere : - Nicolas Delon : Fixed a bug preventing the manager from being ran as a normal user without manual permission customisation. * 2003-10-22, prelude-manager-0.8.9 - James Horvath : Fix an occasional SIGSEGV due to a NULL pointer dereference when using the pgsql database plugin. * 2003-09-21, prelude-manager-0.8.8 - Yoann Vandoorselaere : - Laurent Pautet : Avoid inserting quoted NULL entry in database, which the query client would interpret as being valid. - Fabrice Alphonso : Fix Pgsql database creation script (the user was created, but the table were not). - Yoann Vandoorselaere : Use LOG_ERR in MySQL plugin to tell the user that connection information are missing. Some user were confused by thinking the output looked okay, and didn't thought it was an error. - Yoann Vandoorselaere : Fix insertion of correlated alert. - Yoann Vandoorselaere : Fix a crash in the Xml plugin, on system using libxml 2.5.8. - Laurent Pautet : Try to speed up DB access by setting up some INDEX. - Laurent Pautet : A space was missing in inserted timestamp. only worked for MySQL 3.2x to 4.0.x, not for MySQL 4.1.x nor PostgreSQL (fix bug #84). - Yoann Vandoorselaere : - Krzysztof Zaraska : Bring the "keepalive" and "prompt" option to the manager-adduser program. - Yoann Vandoorselaere : We are now able to accept both Ipv6 and Ipv4 connection. - Sylvain Gil : MacosX port. - Yoann Vandoorselaere : Added support for dumping ECNECHO and CWR flags when they are set in the prelude-nids decoding plugin. - Yoann Vandoorselaere : Fix a bug were ip_len would always be dumped as being 0 in the prelude-nids decoding plugin. - Yoann Vandoorselaere : Fix a possible assertion failure in the Passive OS Fingerprinting code. * 2003-04-28, prelude-manager-0.8.7 - Yoann Vandoorselaere : Update server-logic code. This newer version fix every known bug and race (was tested on an heavily loaded IRC server). - Nicolas Delon : UTC time was used to build the string instead of localtime. GMT offset was badly calculated (using tm_hour field of struct tm). - Yoann Vandoorselaere : You can now provide a prefix for pgsql, mysql, and xml2. Fix bug #0000070 ("Problems with the --enable-pgsql configuration options"). - Patrick Marie : Fixed bug #0000072 and part of #0000073: Full rewrite of the PostgreSQL database/user/tables creation. - Patrick Marie : Fixed bug #0000074 : "prelude-manager-db-create.sh doesn't work with FreeBSD. /bin/sh. Multi conditionnal "if" in test(1) are not supported, neither [[ ]] syntax." - Michael Boman : Fixed bug #0000073 : "prelude-manager-db-create.sh can only use local databases". - Michael Boman : Both mysql and pgsql now have a new command line option to assign port number : dbport. Now works with MySQL v4.0+. - Yoann Vandoorselaere : - Laurent Oudot : Implement passive os fingerprint, adding a fingerprint to the alert additional data. - Yoann Vandoorselaere : Fix a bug pointed out by Laurent Oudot , where packet dumped wouldn't show the DF (Don't Fragment) flag. - Yoann Vandoorselaere : Fix some bug in ARP packet dump. - Krzysztof Zaraska : Allow the use of an arbitrary length certificate buffer. - Yoann Vandoorselaere : Permit linking with OpenSSL so that Debian package might be distributed. - Sylvain Gil : Added a -d option to the XML plugin that will disable file buffering for xml output file. * 2002-09-23, prelude-manager-0.8.6: - Fix a communication problem on linux kernel 2.2.x due to the non standard compliant poll() implementation. (Yoann Vandoorselaere). - Fix server-logic thread cancelation. (Yoann Vandoorselaere). - Add missing field in mysql / pgsql database schema. (Yoann Vandoorselaere). - Fix a FreeBSD compilation problem in the XML reporting plugin. (Krzysztof Zaraska, Yoann Vandoorselaere). * 2002-09-10, prelude-manager-0.8.5: - Fix possible heartbeat insertion problem. (Yoann Vandoorselaere) * 2002-09-02, prelude-manager-0.8.4: - New XML reporting plugin, to report alert in IDMEF-XML. This support dumping to a file, stderr. And might be used to check the message against the IDMEF-XML DTD. (Yoann Vandoorselaere). - correct OpenSSL, PgSQL, MySQL detection. (Yoann Vandoorselaere). * 2002-08-26, prelude-manager-0.8.3: - Fix off by one error in dynamic database query generation (Yoann Vandoorselaere). - Textmod plugin formatting fix (Yoann Vandoorselaere). - Handle message containing inode information (Yoann Vandoorselaere). - Fix memory leak in PostgreSQL plugin (Krzysztof Zaraska). - More detailed MySQL error messages (Krzysztof Zaraska). - Avoid potentially missing \0 on really long filename (Guillaume Pelat). * 2002-08-01, prelude-manager-0.8.2: - Fix possible MySQL plugin compilation problem (Yann Droneaud). * 2002-08-01, prelude-manager-0.8.1: - Compile again on FreeBSD-STABLE (Krzysztof Zaraska).