Hi all,
a new version of FLoP (the Fast Logging Project for Snort) was released.
This new version fixes some minor bugs and adds some new features:
+ TCP support for database access is now possible. This could
be useful if you run programs in chroot() environments where
the unix socket of the database is not available.
+ A bug with the sensor name is removed, it could have happened
that parts of the previous connected sensor were appended with
a newline
+ create_postgresql and create_mysql scripts were added in the
contrib directory to set up the database with all available
features (scheme 107, full payload, following of tagged packets).
+ Disabling of drop, alert (with sockserv/servsock) and following
of tagged packets (with getpacket) is possible.
+ Dropping without writing the alerts to the drop socket is now
alos possible.
+ Some more consistency checks are added.
+ A configure problem with Solaris 8 and earlier is removed and
a bug with x86 Solaris
+ Better support for OpenBSD 3.8
+ Rewrite of the exit routines, on strange circumstances it could
have happened that servsock got hung or the dumped alerts were
corrupted.
+ If the connection between sensor and central server gets
interrupted the reconnect routine got a wait time to give the
central server some time to recover. Otherwise the reconnect
was tried immediately several times.
+ The interface name can be added by the sensor and is stored in
the appropiate database table. (-I option of sockserv)
All this can be found at
http://www.geschke-online.de/FLoP/
Best regards
Dirk
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
