binary package. Fixes DESTDIR installation at the same time. Bump revision.
0.9.0-beta8: - Include spamhaus_drop.dat in the source distribution. Fix installation issue (closes #364). 0.9.0-beta7: - Initial SpamhausDrop plugin implementation, by Wes Young <email@example.com> (closes #363) - Do not discard --root parameters if prefix is absolute. - Python 2.4 backward compatibility fixes. - Handle plugin loading error gracefully. - Improve WormPlugin accuracy, and make it carry a reference to the initial event. The plugin used to alert when seeing an alert to a given target, and this same alert going back to the source. This can happen in a number of case (example: Netbios alert triggered by Snort) As of now, the plugin will wait for the events to be repeated against at least 5 differents hosts. - Dshield CorrelationAlert now handle multiples events. Previously, we used to generate a single Dshield CorrelationAlert for each events where the source address would match the Dshield database. The plugin now generate CorrelationAlert for multiples events received from the same source.
From Rumko via PR 41763.
major change. Reported by Robert Elz in PR 41345.
events received by Prelude. Several isolated alerts, generated from different probes, can thus trigger a single correlation alert should the events be related. This correlation alert then appears within the Prewikka interface and indicates the potential target information via the set of correlation rules.