Prelude Manager 0.9.6 review

Prelude-Manager is a high-availability server which collects and normalizes information from distributed Prelude-IDS sensors and stor

License: GPL (GNU General Public License) File size: 0K Developer: Prelude Manager Team

0

Prelude-Manager is a high-availability server which collects and normalizes information from distributed Prelude-IDS sensors and stores them in a database (or any kind of user-provided media).

Prelude Manager also provide the ability to relay received events to one or several other prelude-manager servers and allows users to filter received events so they can provide specific actions for specific events.

Support for filtering plugins allows users to hook into different places in the Manager to define custom criteria for alert relaying and logging.

Here are some key features of "Prelude Manager":
IDMEF Communication with Sensors
SSL Communication with Sensors
CounterMeasure Control
Text Reporting
MySQL Reporting
PostgreSQL Reporting
XML Reporting
Manager Relaying
Admin Console
Dshield.org Reporting
Attacks.prelude-ids.org Reporting

What's New in This Release:
In case an IDMEF-Service object contain neither name or port attribute, the name is normalized to "unknown" in order to avoid an IDMEF DTD validation issue. analyzer(*).node is normalized.
An OpenBSD resolve issue has been fixed.