Thread: [Sguil-devel] Version 0.8.0
Status: Beta
Brought to you by:
bamm
From: Bamm V. <bam...@gm...> - 2011-02-17 12:44:41
|
I committed a number of changes to cvs last night and am asking for help in testing. Most of the updates are under the hood (like asynchronous file transfers for sancp and pcap data). If you can help and are upgrading an existing installation, make sure you run update_sguildb_v12-v13.sql and update_0.8.tcl (in that order) from server/sql_scripts prior to starting sguild. Bamm -- sguil - The Analyst Console for NSM http://sguil.sf.net |
From: Victor J. <li...@in...> - 2011-02-17 16:33:15
|
On 02/17/2011 04:44 AM, Bamm Visscher wrote: > I committed a number of changes to cvs last night and am asking for > help in testing. Most of the updates are under the hood (like > asynchronous file transfers for sancp and pcap data). > > If you can help and are upgrading an existing installation, make sure > you run update_sguildb_v12-v13.sql and update_0.8.tcl (in that order) > from server/sql_scripts prior to starting sguild. Great news Bamm! Haven't been able to look yet, will do soon. Do think I need to make (big) changes to the modsec2sguil scripts, if at all? Cheers, Victor -- --------------------------------------------- Victor Julien http://www.inliniac.net/ PGP: http://www.inliniac.net/victorjulien.asc --------------------------------------------- |
From: Bamm V. <bam...@gm...> - 2011-02-17 16:40:26
|
No, most sensor agent's won't need anything more than a bump in the rev number. Those few agents like sancp and pcap that use the binary copy function to push data to sguild are the only ones affected. Bamm On Thu, Feb 17, 2011 at 11:15 AM, Victor Julien <li...@in...> wrote: > On 02/17/2011 04:44 AM, Bamm Visscher wrote: >> I committed a number of changes to cvs last night and am asking for >> help in testing. Most of the updates are under the hood (like >> asynchronous file transfers for sancp and pcap data). >> >> If you can help and are upgrading an existing installation, make sure >> you run update_sguildb_v12-v13.sql and update_0.8.tcl (in that order) >> from server/sql_scripts prior to starting sguild. > > Great news Bamm! Haven't been able to look yet, will do soon. Do think I > need to make (big) changes to the modsec2sguil scripts, if at all? > > Cheers, > Victor > > -- > --------------------------------------------- > Victor Julien > http://www.inliniac.net/ > PGP: http://www.inliniac.net/victorjulien.asc > --------------------------------------------- > > > ------------------------------------------------------------------------------ > The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: > Pinpoint memory and threading errors before they happen. > Find and fix more than 250 security defects in the development cycle. > Locate bottlenecks in serial and parallel code that limit performance. > http://p.sf.net/sfu/intel-dev2devfeb > _______________________________________________ > Sguil-devel mailing list > Sgu...@li... > https://lists.sourceforge.net/lists/listinfo/sguil-devel > -- sguil - The Analyst Console for NSM http://sguil.sf.net |
From: Victor J. <li...@in...> - 2011-02-18 01:59:40
|
On 02/17/2011 08:40 AM, Bamm Visscher wrote: > No, most sensor agent's won't need anything more than a bump in the > rev number. Those few agents like sancp and pcap that use the binary > copy function to push data to sguild are the only ones affected. Cool, will try asap and release an updated version of modsec2sguil. Cheers, Victor -- --------------------------------------------- Victor Julien http://www.inliniac.net/ PGP: http://www.inliniac.net/victorjulien.asc --------------------------------------------- |