Changelog

Changelog for 6.1.6 (v6-devel)

Version 6.1.6 [DEVEL] (rgerhards), 2011-03-14

Changelog for 6.1.5 (v6 devel)

Version 6.1.5 [DEVEL] (rgerhards), 2011-03-04

  • improved testbench
  • enhanced imtcp to use a pool of worker threads to process incoming
    messages. This enables higher processing rates, especially in the TLS
    case (where more CPU is needed for the crypto functions)
  • added support for TLS (in anon mode) to tcpflood
  • improved TLS error reporting
  • improved TLS startup (Diffie-Hellman bits do not need to be generated,
    as we do not support full anon key exchange — we always need certs)
  • bugfix: fixed a memory leak and potential abort condition
    this could happen if multiple rulesets were used and some output batches
    contained messages belonging to more than one ruleset.
    fixes: http://bugzilla.adiscon.com/show_bug.cgi?id=226
    fixes: http://bugzilla.adiscon.com/show_bug.cgi?id=218
  • bugfix: memory leak when $RepeatedMsgReduction on was used
    bug tracker: http://bugzilla.adiscon.com/show_bug.cgi?id=225
  • bugfix: potential abort condition when $RepeatedMsgReduction set to on
    as well as potentially in a number of other places where MsgDup() was
    used. This only happened when the imudp input module was used and it
    depended on name resolution not yet had taken place. In other words,
    this was a strange problem that could lead to hard to diagnose
    instability. So if you experience instability, chances are good that
    this fix will help.

Changelog for 5.6.4 (v5-stable)

Version 5.6.4 [V5-STABLE] (rgerhards), 2011-03-03

  • bugfix: potential abort condition when $RepeatedMsgReduction set to on
    as well as potentially in a number of other places where MsgDup() was
    used. This only happened when the imudp input module was used and it
    depended on name resolution not yet had taken place. In other words,
    this was a strange problem that could lead to hard to diagnose
    instability. So if you experience instability, chances are good that
    this fix will help.
  • bugfix: fixed a memory leak and potential abort condition
    this could happen if multiple rulesets were used and some output batches
    contained messages belonging to more than one ruleset.
    fixes: http://bugzilla.adiscon.com/show_bug.cgi?id=226
    fixes: http://bugzilla.adiscon.com/show_bug.cgi?id=218
  • bugfix: memory leak when $RepeatedMsgReduction on was used
    bug tracker: http://bugzilla.adiscon.com/show_bug.cgi?id=225

Changelog for 5.7.7 (v5-beta)

Version 5.7.7  [V5-BETA] (rgerhards), 2011-03-02

  • bugfix: potential abort condition when $RepeatedMsgReduction set to on as well as potentially in a number of other places where MsgDup() was used. This only happened when the imudp input module was used and it depended on name resolution not yet had taken place. In other words, this was a strange problem that could lead to hard to diagnose instability. So if you experience instability, chances are good that this fix will help.

Changelog for 5.7.6 (v5-beta)

Version 5.7.6  [V5-BETA] (rgerhards), 2011-02-25

  • bugfix: fixed a memory leak and potential abort condition this could happen if multiple rulesets were used and some output batches contained messages belonging to more than one ruleset.
    fixes: http://bugzilla.adiscon.com/show_bug.cgi?id=226
    fixes: http://bugzilla.adiscon.com/show_bug.cgi?id=218
  • bugfix: memory leak when $RepeatedMsgReduction on was used
    bug tracker: http://bugzilla.adiscon.com/show_bug.cgi?id=225

Changelog for 5.7.5

Version 5.7.5 [V5-BETA] (rgerhards), 2011-02-23

  • enhance: imfile did not yet support multiple rulesets, now added
    we do this directly in the beta because a) it does not affect existing
    functionality and b) one may argue that this missing functionality is
    close to a bug.
  • improved testbench, added tests for imuxsock
  • bugfix: imuxsock did no longer sanitize received messages
    This was a regression from the imuxsock partial rewrite. Happened
    because the message is no longer run through the standard parsers.
    bug tracker: http://bugzilla.adiscon.com/show_bug.cgi?id=224
  • bugfix: minor race condition in action.c – considered cosmetic
    This is considered cosmetic as multiple threads tried to write exactly
    the same value into the same memory location without sync. The method
    has been changed so this can no longer happen.

Changelog for 6.1.4 (devel)

Version 6.1.4 [DEVEL] (rgerhards), 2011-02-18

  • bugfix/omhdfs: directive $OMHDFSFileName rendered unusable
    due to a search and replace-induced bug ;)
  • bugfix: minor race condition in action.c – considered cosmetic
    This is considered cosmetic as multiple threads tried to write exactly
    the same value into the same memory location without sync. The method
    has been changed so this can no longer happen.
  • added pmsnare parser module (written by David Lang)
  • enhanced imfile to support non-cancel input termination
  • improved systemd socket activation thanks to Marius Tomaschweski
  • improved error reporting for $WorkDirectory
    non-existance and other detectable problems are now reported,
    and the work directory is NOT set in this case
  • bugfix: pmsnare causded abort under some conditions
  • bugfix: abort if imfile reads file line of more than 64KiB
    Thanks to Peter Eisentraut for reporting and analysing this problem.
    bug tracker: http://bugzilla.adiscon.com/show_bug.cgi?id=221
  • bugfix: queue engine did not properly slow down inputs in FULL_DELAY mode
    when in disk-assisted mode. This especially affected imfile, which
    created unnecessarily queue files if a large set of input file data was
    to process.
  • bugfix: very long running actions could prevent shutdown under some
    circumstances. This has now been solved, at least for common
    situations.
  • bugfix: fixed compile problem due to empty structs
    this occured only on some platforms/compilers. thanks to Dražen Kačar
    for the fix

Changelog for 5.7.4 (v5-beta)

Version 5.7.4 [V5-BETA] (rgerhards), 2011-02-17

  • added pmsnare parser module (written by David Lang)
  • enhanced imfile to support non-cancel input termination
  • improved systemd socket activation thanks to Marius Tomaschweski
  • improved error reporting for $WorkDirectory
    non-existance and other detectable problems are now reported,
    and the work directory is NOT set in this case
  • bugfix: pmsnare causded abort under some conditions
  • bugfix: abort if imfile reads file line of more than 64KiB
    Thanks to Peter Eisentraut for reporting and analysing this problem.
    bug tracker: http://bugzilla.adiscon.com/show_bug.cgi?id=221
  • bugfix: queue engine did not properly slow down inputs in FULL_DELAY mode
    when in disk-assisted mode. This especially affected imfile, which
    created unnecessarily queue files if a large set of input file data was
    to process.
  • bugfix: very long running actions could prevent shutdown under some
    circumstances. This has now been solved, at least for common
    situations.
  • bugfix: fixed compile problem due to empty structs
    this occured only on some platforms/compilers. thanks to Dražen Kačar
    for the fix

Changelog for 5.7.3 (v5-beta)

Version 5.7.3 [V5-BETA] (rgerhards), 2011-02-07

  • added support for processing multi-line messages in imfile
    thanks to David Lang for implementing this
  • added $IMUDPSchedulingPolicy and $IMUDPSchedulingPriority config settings
  • added $LocalHostName config directive
  • bugfix: fixed build problems on some platforms
    namely those that have 32bit atomic operations but not 64 bit ones
  • bugfix: local hostname was pulled too-early, so that some config
    directives (namely FQDN settings) did not have any effect
  • bugfix: imfile did duplicate messages under some circumstances
  • added $OMMySQLConfigFile config directive
  • added $OMMySQLConfigSection config directive
Scroll to top