We are pleased to announce the availability of OSSEC version 1.2. This
new version comes with lots of new features, including:
* Support for OpenBSD PF logs.
* Support for compiled (c-based) decoders.
* New options for composite rules: "srcport", "dstport",
"same_src_port", "same_dst_port"
and "same_location".
* Additional granular e-mail options. We added "sms" format output and many
other options. More information: http://www.ossec.net/dcid/?p=75
* Support for Zeus WebServer logs.
* Support for daily/chained checksum of alert logs. More information:
http://www.ossec.net/wiki/index.php/Know_How:LogSign
We also completed a large re-design of the internal architecture of analysisd
(ossec process responsible for decoding and analysis), greatly improving
performance and organization.
More information at: http://www.ossec.net/wiki/index.php/News
A list with all the bug fixes and features added is available at
http://www.ossec.net/announcements/v1.2-2007-05-16.txt
Download the new version: http://www.ossec.net/en/downloads.html
Checksums:
MD5 (ossec-hids-1.2.tar.gz) = cd9e323a3d9184c97f5db54a3d5f5aa7
SHA1 (ossec-hids-1.2.tar.gz) = 831b03059f279132a4b26f2debd443fff294cb5a
MD5 (ossec-agent-win32-1.2.exe) = e9bede4e84b1445ad67a1739564fafad
SHA1 (ossec-agent-win32-1.2.exe) = 84f443f2df268096775c56c6d8cab3de0cff59dd
We want to thank everyone who contributed or just sent some comments or
nice words to us! We really appreciate the feedback!
--
Daniel B. Cid (in name of the OSSEC team).
dcid ( at ) ossec.net
