Prelude LML 0.9.10.1

Prelude-LML is a signature-based log analyzer monitoring your log file and received syslog messages for suspicious activity.
It handle events generated by a large set of components, including but not limited to: APC Emu, BigIP, Cisco PIX, Clamav, Dell-OM, Grsecurity, Honeyd, ipchains, Netfilter, ipfw, Nokia ipso, Apache ModSecurity, Ms-SQL, Nagios, Norton Antivirus Corporate Edition, NTsyslog, Pam, Portsentry, Postfix, Proftpd, SSH, and others.
Enhancements:
- SSH rules are now IPv6 compliant, allowing you to merge old IPv6 only rules with IPv4 rules.
- Incorrect target user assignment has been fixed in SSH rule, as well as incorrect PCRE reference in assessment.impact.description.
- CISCO router acl lists can now use names instead of numbers (this made rule id=500 in cisco-router.rules fail to alert on packet denys on newer cisco devices).
- Apache formatting when Apache logname or user is set has been fixed, as has invalid user.user_id(0).name assignment in SSH rule 1913.
- Various other bugfixes and minor improvements were also made.