Bug#108787: marked as done (ITP: acidlab -- analysis engine to search and process security incidents generated by security-related software.)
Your message dated Sat, 09 Mar 2002 00:41:14 -0500
with message-id <E16jZbW-0004ie-00@auric.debian.org>
and subject line Bug#108787: fixed in acidlab 0.9.6b20-1
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 15 Aug 2001 13:23:48 +0000
>From rvdm@wiretrip.org Wed Aug 15 08:23:48 2001
Return-path: <rvdm@wiretrip.org>
Received: from going.on.a.wiretrip.org (sorrow.wiretrip.org) [195.64.80.165] (mail)
by master.debian.org with esmtp (Exim 3.12 1 (Debian))
id 15X0dY-000517-00; Wed, 15 Aug 2001 08:23:08 -0500
Received: from rvdm by sorrow.wiretrip.org with local (Exim 3.22 #1 (Debian))
id 15X0cQ-0004pq-00
for <submit@bugs.debian.org>; Wed, 15 Aug 2001 15:21:58 +0200
Date: Wed, 15 Aug 2001 15:21:58 +0200
From: Robert van der Meulen <rvdm@wiretrip.org>
To: submit@bugs.debian.org
Subject: ITP: acidlab
Message-ID: <20010815152158.D16234@wiretrip.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.18i
Delivered-To: submit@bugs.debian.org
Package: wnpp
Severity: wishlist
Note: I'm taking over this ITP from <chewie@wookimus.net>.
ACID is a PHP-based analysis engine to search and process a database
of security incidents generated by the security-related software such
as the NIDS Snort. The features currently include:
- Search interface for finding alerts matching practically any
criteria. This includes arrival time, sensor, signature time,
source/destination address/port, flags, payload, etc. These
queries can be made arbitrarily complex to satisfy almost any
parameters.
- Alert Groups: allow for a logical grouping of alerts on which
analysis can be done. It a quick way to combine multiple searches
or to associate a comment with an alert or group of alerts
- Alert purging: allows for the deletion of alerts from the database.
This functionality is ideal for removing known false-positives.
- Statistics:
- Snapshot statistics to assess current network state
- Aggregate statistics on a per sensor, IP, or alert basis
- Graphing alert arrival over time
- All features are provided in real-time
Author, Links, etc: by Roman Danyliw <rdd@cert.org>, <roman@danyliw.com>
This plugin was developed at the CERT Coordination Center as a part
of the AIRCERT project.
See http://www.cert.org/kb/acid for the most up to date information and
documentation about this application.
Mirrored:
http://acidlab.sourceforge.net
http://www.andrew.cmu.edu/~rdanyliw/snort/
(usually contains the latest beta code)
-------------------------------------------------------------------------------
** Copyright (C) 2000 Carnegie Mellon University
**
** Author: Roman Danyliw <rdd@cert.org>, <roman@danyliw.com>
**
** This program is free software; you can redistribute it and/or modify
** it under the terms of the GNU General Public License as published by
** the Free Software Foundation; either version 2 of the License, or
** (at your option) any later version.
**
** This program is distributed in the hope that it will be useful,
** but WITHOUT ANY WARRANTY; without even the implied warranty of
** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
** GNU General Public License for more details.
**
** You should have received a copy of the GNU General Public License
** along with this program; if not, write to the Free Software
** Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
-------------------------------------------------------------------------------
--
Linux Generation
encrypted mail preferred. finger rvdm@debian.org for my GnuPG/PGP key.
Laat je in ieder geval nooit imponeren door een hard blaffende advocaat.
---------------------------------------
Received: (at 108787-close) by bugs.debian.org; 9 Mar 2002 06:03:18 +0000
>From rdonald@auric.debian.org Sat Mar 09 00:03:18 2002
Return-path: <rdonald@auric.debian.org>
Received: from auric.debian.org [206.246.226.45] (mail)
by master.debian.org with esmtp (Exim 3.12 1 (Debian))
id 16jZwr-0006qF-00; Sat, 09 Mar 2002 00:03:17 -0600
Received: from rdonald by auric.debian.org with local (Exim 3.12 1 (Debian))
id 16jZbW-0004ie-00; Sat, 09 Mar 2002 00:41:14 -0500
From: jbouse@debian.org (Jeremy T. Bouse)
To: 108787-close@bugs.debian.org
X-Lisa: $Revision: 1.4 $
Subject: Bug#108787: fixed in acidlab 0.9.6b20-1
Message-Id: <E16jZbW-0004ie-00@auric.debian.org>
Sender: Randall Donald <rdonald@auric.debian.org>
Date: Sat, 09 Mar 2002 00:41:14 -0500
Delivered-To: 108787-close@bugs.debian.org
We believe that the bug you reported is fixed in the latest version of
acidlab, which is due to be installed in the Debian FTP archive:
acidlab_0.9.6b20-1.diff.gz
to pool/main/a/acidlab/acidlab_0.9.6b20-1.diff.gz
acidlab_0.9.6b20-1.dsc
to pool/main/a/acidlab/acidlab_0.9.6b20-1.dsc
acidlab_0.9.6b20-1_all.deb
to pool/main/a/acidlab/acidlab_0.9.6b20-1_all.deb
acidlab_0.9.6b20.orig.tar.gz
to pool/main/a/acidlab/acidlab_0.9.6b20.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 108787@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jeremy T. Bouse <jbouse@debian.org> (supplier of updated acidlab package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Sat, 2 Mar 2002 13:24:41 -0800
Source: acidlab
Binary: acidlab
Architecture: source all
Version: 0.9.6b20-1
Distribution: unstable
Urgency: low
Maintainer: Jeremy T. Bouse <jbouse@debian.org>
Changed-By: Jeremy T. Bouse <jbouse@debian.org>
Description:
acidlab - Analysis Console for Intrusion Databases
Closes: 108787
Changes:
acidlab (0.9.6b20-1) unstable; urgency=low
.
* Initial Debian version. (Closes: #108787)
Files:
818960fc94133a20d1b99ef60c260309 628 web extra acidlab_0.9.6b20-1.dsc
ca7719cfed424c5173cdcd37b6299199 108889 web extra acidlab_0.9.6b20.orig.tar.gz
21b16a1355a000a20e0bb5a722299113 8111 web extra acidlab_0.9.6b20-1.diff.gz
f834c151103b60d7b90ce5544f30d2af 118412 web extra acidlab_0.9.6b20-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE8gUUMIcJXVD3J+UYRAiiFAKCbnvYyM6Zv7kYzt+SyHbfzQmmGtwCfd40n
xuvDQrKDzDXkSGxTZrDfDD8=
=bRPL
-----END PGP SIGNATURE-----
Reply to: