Prelude LML

Prelude-LML is a signature-based log analyzer monitoring your log file and received syslog messages for suspicious activity.
Download

Prelude LML Ranking & Summary

Advertisement

  • Rating:
  • License:
  • GPL
  • Price:
  • FREE
  • Publisher Name:
  • Prelude Team
  • Publisher web site:
  • http://www.prelude-ids.org/

Prelude LML Tags


Prelude LML Description

Prelude-LML is a signature-based log analyzer monitoring your log file and received syslog messages for suspicious activity. Prelude-LML is a signature-based log analyzer monitoring your log file and received syslog messages for suspicious activity.It handle events generated by a large set of components, including but not limited to: APC Emu, BigIP, Cisco PIX, Clamav, Dell-OM, Grsecurity, Honeyd, ipchains, Netfilter, ipfw, Nokia ipso, Apache ModSecurity, Ms-SQL, Nagios, Norton Antivirus Corporate Edition, NTsyslog, Pam, Portsentry, Postfix, Proftpd, SSH, and others. What's New in This Release: · This release fixes a possible permission error that could happen when a given logfile was only accessible through a group-specific permission. · The ModSecurity ruleset now provides much more descriptive classification text, adds regexps for , , and fields, and finetunes targets/types. · Gamin/FAM support has been deprecated in favor of libev, fixing an SELinux issue. · The polling architecture has been improved by using an operating system-specific backend when possible. · This release monitors files that are not immediately available for reading on startup. · Once the file can be monitored, libev provides notification.


Prelude LML Related Software