Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Malcolm v3.1.0 development #165

Merged
merged 118 commits into from May 13, 2021
Merged

Malcolm v3.1.0 development #165

merged 118 commits into from May 13, 2021

Conversation

mmguero
Copy link
Collaborator

@mmguero mmguero commented May 13, 2021 •
edited

  • Network analyzers

  • New or improved

    • Updated many Kibana dashboards and added dashbaords for newly-supported network protocols
    • Improved output of debug logs from docker images
    • Many minor improvements to underlying system for ISO installations
    • Massively cut build time for Hedgehog ISO and Zeek Docker container by using .deb packages from released versions rather than building from source
    • During build, install all Zeek plugins via zkg

  • Version updates

  • Bugs fixed

    • When LDAP authentication is used instead of BASIC authentication, show a landing page rather than a server error when attempting to browse to the local authentication management interface
    • Fixed a regression bug where Malcolm fails to start correctly if not using UID/GID 1000:1000
    • Don't automatically expose elasticsearch (and logstash) ports unless explicitly configured to do so
    • freshclam should update the clamav database during docker image build

@mmguero
Adjust github links for idaholab/Malcolm for v3.0.1 release
83e7557
@mmguero
restore web site generation
63c943f
@mmguero
bump version for development
ca19e04
@mmguero
initial pass at converting to zeek 4.0
fdfbd6c
@mmguero
working on getting zeek4 plugins working
1fbece6
@mmguero
more work on getting plugins working with zeek 4.0
9bad4c2
@mmguero
more work on getting plugins working with zeek 4.0
67e13d1
@mmguero
more work on getting plugins working with zeek 4.0
ca3571d
@mmguero
more work on getting plugins working with zeek 4.0
e23da75
@mmguero
more work on getting plugins working with zeek 4.0
f1d89c6
@mmguero
more work on getting plugins working with zeek 4.0
e46652d
@mmguero
more work on getting plugins working with zeek 4.0
91328c3
@mmguero
more work on getting plugins working with zeek 4.0
c8744fe
@mmguero
more work on getting plugins working with zeek 4.0
515af0f
@mmguero
updates for 3.0.2 (point upgrade for odfe and sankey plugin stuff)
d3d67fe
@mmguero
more work on getting GQUIC to work
ecb5ca4
@mmguero
updates for 3.0.2 (point upgrade for odfe and sankey plugin stuff)
fd05823
@mmguero
more work on getting plugins working with zeek 4.0
aa77219
@mmguero
reduce verbosity for attempt transition messages from elasticsearch
b56ed5f
@mmguero
added todo
0ec1ab1
@mmguero
Merge remote-tracking branch 'mmguero/development' into topic/zeek4
bdd360c
@mmguero
switch branch name for quic protocol analyzer
49de4c4
@mmguero
reduce verbosity for attempt transition messages from elasticsearch
571d2e7
@mmguero
Merge remote-tracking branch 'mmguero/development' into topic/zeek4
7b87b4c
@mmguero
reduce kibana verbosity a little more
37a1564
@mmguero
Merge remote-tracking branch 'mmguero/development' into topic/zeek4
a4fe654
@mmguero
fix sensor build of zeek
65c6a7e
@mmguero
switch link for legacy stunnel
c698adf
@mmguero
reduce verbosity
fd23b39
@mmguero
update kibana plugin build
d84d09f
mmguero and others added 27 commits April 21, 2021 15:26
@mmguero
standardize service
c93e25a
@mmguero
bump version for zeek to 4.0.1
3c3c8db
@mmguero
in ISO installs, allow non-root users to use user_allow_other in fuse…
b63ca6e 
… mounting (like for VMware host shared folders)
@mmguero
Merge remote-tracking branch 'mmguero/development' into topic/zeek4
4c7e4b9
@mmguero
bump versions
7afac7e
@dependabot
Bump flask-cors from 3.0.8 to 3.0.9 in /sensor-iso/interface
6ee8c2d 
Bumps [flask-cors](https://github.com/corydolphin/flask-cors) from 3.0.8 to 3.0.9.
- [Release notes](https://github.com/corydolphin/flask-cors/releases)
- [Changelog](https://github.com/corydolphin/flask-cors/blob/master/CHANGELOG.md)
- [Commits](corydolphin/flask-cors@3.0.8...3.0.9)

Signed-off-by: dependabot[bot] <support@github.com>
@mmguero
use my ldap parser
37fdaa0
@mmguero
fix building protologbeat
d6603dc
@mmguero
reflect main branch
084773d
@mmguero
Merge pull request #41 from idaholab/dependabot/pip/sensor-iso/interf…
b2084f6 
…ace/flask-cors-3.0.9

Bump flask-cors from 3.0.8 to 3.0.9 in /sensor-iso/interface
@mmguero
Merge remote-tracking branch 'idaholab/master'
42b22e9
@mmguero
Merge remote-tracking branch 'mmguero/master' into development
0000105
@mmguero
Merge remote-tracking branch 'mmguero/development' into topic/zeek4
913cf9f
@mmguero
replace LDAP parser
f0594ea
@mmguero
treat message_id as a term for LDAP; also, ignore_above 1024
edd53a1
@mmguero
restore links for LDAP dashbaords
477f2e1
@mmguero
dashboard updates for DNS, LDAP and security overview
26148ec
@mmguero
temporarily disable ecat_arp_info
bf6f74b
@mmguero
ethercat dashboards
eb597e1
@mmguero
bump version
29ab07d
@mmguero
update nginx version to 1.20.0
c880491
@mmguero
added ethercat dashbaord
6ef897b
@mmguero
fix idaholab#42, logstash fails to start due to permissions issue on …
7efaf48 
…logstash.keystore when UID is not 1000
@mmguero
also related to idaholab#42, make sure elasticsearch processes start …
678289c 
…up with the right user
@mmguero
map ldap to arkime fields
2eea362
@mmguero
parse proto from ldap logs
8780faa
@mmguero
Merge remote-tracking branch 'mmguero-dev/development' into topic/310…
90433ef 
…_merge
@lgtm-com
Copy link

lgtm-com bot commented May 13, 2021

This pull request fixes 1 alert when merging 90433ef into 94125a4 - view on LGTM.com

fixed alerts:

  • 1 for Except block handles 'BaseException'

@mmguero mmguero merged commit c09ce35 into master May 13, 2021
@mmguero mmguero deleted the topic/310_merge branch May 13, 2021 15:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
1 participant
@mmguero