devel

Version 6.1.5 [DEVEL] (rgerhards), 2011-03-04

• improved testbench
• enhanced imtcp to use a pool of worker threads to process incoming
  messages. This enables higher processing rates, especially in the TLS
  case (where more CPU is needed for the crypto functions)
• added support for TLS (in anon mode) to tcpflood
• improved TLS error reporting
• improved TLS startup (Diffie-Hellman bits do not need to be generated,
  as we do not support full anon key exchange — we always need certs)
• bugfix: fixed a memory leak and potential abort condition
  this could happen if multiple rulesets were used and some output batches
  contained messages belonging to more than one ruleset.
  fixes: http://bugzilla.adiscon.com/show_bug.cgi?id=226
  fixes: http://bugzilla.adiscon.com/show_bug.cgi?id=218
• bugfix: memory leak when $RepeatedMsgReduction on was used
  bug tracker: http://bugzilla.adiscon.com/show_bug.cgi?id=225
• bugfix: potential abort condition when $RepeatedMsgReduction set to on
  as well as potentially in a number of other places where MsgDup() was
  used. This only happened when the imudp input module was used and it
  depended on name resolution not yet had taken place. In other words,
  this was a strange problem that could lead to hard to diagnose
  instability. So if you experience instability, chances are good that
  this fix will help.

Version 6.1.4 [DEVEL] (rgerhards), 2011-02-18

• bugfix/omhdfs: directive $OMHDFSFileName rendered unusable
  due to a search and replace-induced bug ;)
• bugfix: minor race condition in action.c – considered cosmetic
  This is considered cosmetic as multiple threads tried to write exactly
  the same value into the same memory location without sync. The method
  has been changed so this can no longer happen.
• added pmsnare parser module (written by David Lang)
• enhanced imfile to support non-cancel input termination
• improved systemd socket activation thanks to Marius Tomaschweski
• improved error reporting for $WorkDirectory
  non-existance and other detectable problems are now reported,
  and the work directory is NOT set in this case
• bugfix: pmsnare causded abort under some conditions
• bugfix: abort if imfile reads file line of more than 64KiB
  Thanks to Peter Eisentraut for reporting and analysing this problem.
  bug tracker: http://bugzilla.adiscon.com/show_bug.cgi?id=221
• bugfix: queue engine did not properly slow down inputs in FULL_DELAY mode
  when in disk-assisted mode. This especially affected imfile, which
  created unnecessarily queue files if a large set of input file data was
  to process.
• bugfix: very long running actions could prevent shutdown under some
  circumstances. This has now been solved, at least for common
  situations.
• bugfix: fixed compile problem due to empty structs
  this occured only on some platforms/compilers. thanks to Dražen Kačar
  for the fix