FLoP-1.5.1 released

[Dirk Geschke <dirk () geschke-online de>]

Hi all,

a new version of FLoP (the Fast Logging Project for Snort) was released.

This new version fixes some minor bugs and adds some new features:

  + TCP support for database access is now possible. This could 
    be useful if you run programs in chroot() environments where
    the unix socket of the database is not available.
  + A bug with the sensor name is removed, it could have happened 
    that parts of the previous connected sensor were appended with 
    a newline
  + create_postgresql and create_mysql scripts were added in the 
    contrib directory to set up the database with all available
    features (scheme 107, full payload, following of tagged packets).
  + Disabling of drop, alert (with sockserv/servsock) and following  
    of tagged packets (with getpacket) is possible.
  + Dropping without writing the alerts to the drop socket is now 
    alos possible.
  + Some more consistency checks are added.
  + A configure problem with Solaris 8 and earlier is removed and
    a bug with x86 Solaris
  + Better support for OpenBSD 3.8
  + Rewrite of the exit routines, on strange circumstances it could
    have happened that servsock got hung or the dumped alerts were
    corrupted.
  + If the connection between sensor and central server gets 
    interrupted the reconnect routine got a wait time to give the 
    central server some time to recover. Otherwise the reconnect
    was tried immediately several times.
  + The interface name can be added by the sensor and is stored in
    the appropiate database table. (-I option of sockserv)

All this can be found at

   http://www.geschke-online.de/FLoP/

Best regards

Dirk



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users