NSClient++ 0.4.0 RC1! (Finally)
build 126, 127 will be out later tonight whith some fixes to NSCA unit-tests.
After years of vapor ware and many broken promises I can finally proudly pressent the first release candidate of NSCLient++ 0.4.0!
So what can you expect you ask? Quite a lot in fact but currently the rather sad answer will be unfortunetly "not much". Now this is a good thing and the reason is that the idea is that anyone runnign on a previous version of NSCLient++ should be able to just upgrade and not notice the difference (except for the odd bug fix here and there).
But for all the rest of you who do not want to "just upgrade" there is a massive amount of new features. The two biggest changes will undoubtedly be the linux support as well as is a shift from beeing a "NRPE client" to more of a monitoring gateway which supports more protocols (with even more in the pipe). Another other major change is ofcourse the embedded python interpreter and the very extensive python API making it possible to create plugins in python which can have state across your monitoring.
So now it is just for everyone to go out test it and let me know what is not working so we can release a bug free version in the near future. I have not set a date as I am relaying on the community (yes, that is you!) for doing much of the test work and that may or may not take a lot of time (depending on how much YOU! test).
Stability and quality wise I hope it is farily stable and everything works as-is but one never knows when there is such a massive update. Especially as it is apretty free-form application which has a lot of the edge cases. But another major improvment is that there are now unit-tests which test various parts of the application at the time of writing there is around 1000 unit tests which more to come.
Many new protocols
We now support a number of new protocols (as well as old).
Currently supported:
- NRPE
- NSCA
- "check_nt"
- SysLog?
- SMTP
- NSCP (early concept version, both as distributed (think gearman) and non distributed (think NSCA/NRPE))
In the works:
- http (rest)
- Graphite
- check_mk
- NRDP
- SNMP
- WMI
- "native remote windows checks"
Brand new API
Major new API changes which allows a lot more flexibility as well as extensible from modules and scripts.
Currently supported:
- Python
- plugins
- Lua (old API currently)
In the works:
- Lua
- .Net
Brand new settings sub systems
Brand new flexible settings sub systems which supports many new formats as well as generation and including cross formats.
Currently supported:
- ini-files
- registry
- http (ini files)
- old
- dummy (in memory store)
In the works:
- XML
- improved http
Other fixes and enhancments
We have of course a myrriad of bug fixes enhancments and and such here are a few highlights.
highlights:
- Brand new (easy to use?) command line interface
- Linux suppport (as mentioned previously)
- CheckProcState: Enchancements
- CheckEventLog: Real time checking
- CheckWMI: Remote check support (rather crude currently)
- lots of other things but focus is mainly on internals so checks are mainly the same
So! Test away, and hit me with your bugs, defects, problems, and issues... Michael Medin
Status
Well, I sort of promised to release rc1 of 0.4.0 on which has now become last year. This was in fact almost about to happen but unfortunately I grew ill shortly after xmas (nothing serious really). But this has keep me away from the computer for about 2 weeks now meaning I am slightly behind. And what is worse I missed the golden "holiday opportunity" to do some serious documentation.
Now it is not too bad I finished the NRPE unit test last night and hopefully I will get some spare time during night this week to document the initial usage of 0.4.0 so with luck next week we will in fact see the first RC of 0.4.0!
Michael Medin
Second 0.4.0 beta out!
Hello,
The main new things is a much improved client syntax as well as fully functional client modules and much improved handling of "Clients".
Get it from the download section (113) or here:
- http://files.nsclient.org/nightly/NSCP-0.4.0.113-x64.msi
- http://files.nsclient.org/nightly/NSCP-0.4.0.113-Win32.msi
- On linux just checkout trunk and build (see build page)
I will post a guide to getting started with 0.4.0 later tonight.
Michael Medin
Full change log:
2011-12-06 MickeM * Fixed so command line client wont try to run commands in modules which does not support it. * Changed to when no settings is found a default one is created * Removed old "location" key from switch context and changed so it use the new number scheme 2011-12-06 MickeM * Added python unittests to make sure threading is working properly * Simpliefied and cleaned up the command line syntax a bit * Now --exec is the default option for client mode (but it will notify you it thought so) * Added "command-less" execution to PythonScript so you can do --exec --script ... (without having --exec run) * Fixed an issue related to python threading * Fixed Scheduler header propgation * Fixed so all Client module use "complex" API meaning headers are propagated correctly * Fixed scheduler alias issue 2011-11-27 MickeM * Fixed some NSCA issues (reading from new conf) * Fixed some linux build issues (related to refactoring) 2011-11-27 MickeM * Major refactoring in the command line interface * Added support for alias to many common module (command line) so: nscp eventlog (is the same as nscp client --module CheckEventLog) * Fixed issue with CheckEventLog message rendering and eventid * Refactored all Client modules to all support command line, commands and submissions. * Added uniform handling of "everything" to all Client plugins * Fixed SyslogClient to work "as advertised" (ie. all hardcoded stuff is removed) * Fixed utf8 issue with text strings (now have a working concept which needs to be implementd "all over the place") * Many issues and fixes related to clients. * Fixed so CheckEvent log (insert) works much better (added new options)
First beta version of 0.4.0
Hello,
We now have the first beta version of 0.4.0 released. The main goal of this version is to verify that everything works "smoothly" for existing users. So essentally try to upgrade an existing 0.3.x version and let me know if everything is working out alright.
Everything should be the same after upgrading to 0.4.0 and you should not notice any differences. But this is an early release so please be carefull as it probably will have many issues and defects yet.
But it would realley help me and speed things along if a lot of people could help test this version with various existing configurations.
Also please do a backup of your existing configuration before installing this version (in case the installer is broken).
Download:
Also I will tonight try to start answering all questions last few weeks, I have been busy elesewhere last few weeks...
Since elfichero asked for a changelog I pasted it in. Notice These are changes since 0.4.x was split apart. But during a lot of the internal work I did not keep track of changes are things were moving back and forth so the "internal changes" will not be reflected here in detail.
I will write up a blog post about "whats new" in 0.4.x but in essence the "core" is new whereas the plugins (check_xxx) are the same (ish). There is also also a lot of new plugins (which were not part of 0.3.9).
2011-11-14 MickeM
* Fixed issue with installer not saving nsc.ini when upgrading from 0.3.9
2011-11-09 MickeM
* Added initial SyslogClient module to allow syuslog forwarding (of passive checks ish)
Still requires template support and configuration options (mainly PoC right now).
* Added initial SMTPClient to allow sending messages via SMTP.
Still requires template support and configuration options (mainly PoC right now).
* Fixed unicode log issue (still not sure message format is correct)
* Renamed Message to log in internal wrapper API
* Fixed issue in settings old (regarding readin new keys, not 100% supported yet)
2011-11-06 MickeM
* Had some "vacation" so no updates for a while
* A lot of fixes to the NSCA parts (now 100% compatible with old settings file)
* Added option to read sections (to plugin API)
* Fixed issues in settings wrapper so child paths are also mapped (not just keys)
* Many fixes related to NRPE/NSCA/*
* "RC quality" expect RC within the week (only need to fix default config file somehow)
* Upgraded all unit test to use the simplified API
* Fixed a some unicode issues in PythonScript module
* Improved threading a bit
* Fixed CheckSystem (service check)
* Fixed duplicate keys (when replacing) in old settings client
2011-10-21 MickeM
* Some more threading issues in Python (works perfectly(?) now)
* Refactored the tests a bit making test suites runable from a central hub
* Fixed soo everything builds and works on Linux
2011-10-19 MickeM
* Fixed some threadding issues in PythonScript
* Still working on refactoring the unittest helpers a bit
2011-10-16 MickeM
* Fixed issue with loading zero-byte UTF-8 config files
* Fixed some issues with settings subsystem (debug log as well as createing instances for --generate)
* Added ability to set event log to real-time
* Added support for multiple eventlogs in real-time
2011-10-09 MickeM
* Real-time CheckEventLog working (still only for one, and I think application log)
* Added python tests to validfate that Real-time eventlog is working.
* Fixed som defects here and there (now builds on Linux again)
* Fixed so it builds in "debug mode"
* Fixed issue in grammar which caused infiniate loop in som cases
* Fixed so error rendering in eventlog works with "infininate number of argumnets"
* Added support for targeting execs (in API)
* Fixed some invalid return messages
* Streamlined submissions wrappers to be more inline with "other wrappers"
* Fixed a myrriad of minor python script bugs
* Added sleep command (which sometimes causes issues so use with care)
2011-10-06 MickeM
* Initial command for createing eventlog records
* Initial real-time eventlog checker
* Fixed obscure c-tor issue with filters
2011-09-27 MickeM
* Fixed many many issues all over the place as I tried to make things working for my pressention at nwc.
2011-09-24 MickeM
* Started on NSCA unit-tests in python
* Refactored channel API a bit to better suite NSCA (and how it actually works)
* Changed how headers are created (nothice this might have broken NSCP stuff, havent checked)
* Created helper lib for Python Unittests
2011-09-21 MickeM
* Renamed NSCAAgent to NSCAClient (to be consistant)
* Created a NSCAServer module (again for consistancy)
This will be the defenition of the new "channels" so keep a lookout in the next few weeks
2011-09-18 MickeM
* Implemented first version of DistributedClient and DistributedSServer which work so now we have a proper message based transport.
Still a lot of rough edges such as cookie and authentication support is hard coded.
We also need a proper two way distributed server as well as implement "all" payload types.
2011-09-11 MickeM
* Massive overhaul here and there
* Added new helper for handling "targets" (so they are the same)
* Extracted "command line handling" so all clients will work the same
* Extracted command processor to a common class to make all clients work the same
* Added initial zeromq stuff (nothing usable)
* Added an implementation layer for NSCP protocol parsing (so zeromq stuff can reuse it)
2011-09-05 MickeM
* Cleaned up some dependencies (on config.h)
* Fixed invalid data in config.h.in
2011-09-03 MickeM (0.4.0.93)
* Created a protcol buffer free version of the python test script
* Upgraded to new version of simpleinin class
* Added new component for python protocol buffer library to installer
* Added installer for unittests to test.py run like so:
nscp --client --module PythonScript --command execute-and-load-python --script test.py
* Fixed so settings are created if not existing
* Fixed so plugins are not loaded in client mode
* Fixed so core is booting correctly in client mode
* Added new option --settings --switch <context> to allow switching context without migrating data
* Fixed unicode error on linux (settings file)
2011-09-02 MickeM
* Fixed several issues in PythonScript
* PythonScript supports loading multiple instances as well as scripts
* Added some basic channel test to test.py script (the idea is that this will become "unit tests" eventually)
2011-09-01 MickeM
* Implemented registration of channels (so no longer faked)
* Added settings key to change the NSCAAgent channel name
* Addded proper channel handling to PythonScript module
* Improved error handling in channels API
* Rewrote wrapper API to use templates and classes instead of macros (ish)
* Improved the internal plugin wrapping API to support multiple plugin load
* Fixed so PythonScript module supports multiple plugin load (with new argument for plugin_id)
* Added API for registrying routers and handling routing (almost there now)
2011-09-01 MickeM
* Fixed issue with messages due to new API
2011-08-31 MickeM
* Added support for loading same plugin twice (in different sessions)
* Added preliminary support for routing passive checks
2011-08-30 MickeM
* Fixed uncaught exception in test client
* Added protocol buffers to source (needs to be added to installer as well)
* Added example python protocol buffer handler
* Added lib folder to python scripting (and automagicall load)
2011-08-29 MickeM
* Fixed some *nix build issues...
2011-08-25 MickeM
* Fixed some issues in the NSCPClient
* Fixed debug log issue in core
* Added support for "pushing" passive checks via NSCP
2011-08-24 MickeM
* Sever refactoring of the new API (there is now two pb files ipc for NSCP protocol and plugin for plugin communication)
* Cleaned up API helper functions
* Fixed client argument for "client mode" to allow arbitrary arguments
* Cleaned up the argument processor code now requires "mode" to be first argument
2011-08-23 MickeM
* Fixed issue in the NSCP server
2011-08-22 MickeM
* Added initial NSCP protocol implenmentation (very vrude and not really usefull yet)
* Fixed so it builds on linux
* Fixed so automagic plugin renaming add lib<LIB name> on *nix.
* Fixed so it works on linux (fixed issues with timeout)
2011-08-16 MickeM (0.4.0.85)
* Added support for remote WMI checking using target/username/password options like so:
CheckWMI target=192.168.0.123 user=\\foobar password=foobar namespace=root\\cimv2 MaxCrit=3 MinWarn=1 "Query:load=Select * from win32_Processor"
* Added support for looking up targets to CheckWMI
CheckWMI target=my_test_xp MaxCrit=3 MinWarn=1 "Query:load=Select * from win32_Processor"
Where <target> is defined under /settings/targets as well as /settings/targets/my_test_xp
2011-08-15 MickeM
* Readded allowed hosts function
* Moved default socket options to /settings/default/socket
* Added more default socket options
* Added support for target in default plugin helpers
* Added remote WMI commands
* Added target section under /settings/targets
2011-08-14 MickeM
* NRPEClient now works on linux
* Added "portable" settings map file to installer (so it will work with old installed versions)
* Rename Function to Registry in PythonScript API as well as some other function renames
* Started to clean up the helpers around the API
* Added support for execute to PythonScripts to execute commands
* BUG: just realised that static plugin instances prevent multiple instances :)
Will fix but not now as it is not important (for me)...
* Added initial support for channels to PythonScript
Core still lacks support for subscribing to arbitrary channels
2011-08-13 MickeM
* Added support for command line execution to PythonScript module
* Readded support for specifying module on command line with --client mode
* Fixed some issues with the NRPEClient module
2011-08-12 MickeM
* Finnished (rough) adding back command line exec (with modern API)
* Fixed so installer uses correct name for dll:s (now Server not Listsener)
2011-08-11 MickeM
* Started to add back command line exec (with modern API)
2011-08-10 MickeM
* Fixed linus issues and defect
* Fixed some issues in the test python script regarding how prefix is handled
* Fixed PythonScript module to actually use the correct function map :)
* Fixed so it builds and runs on linux (but parser had issues so disabled som grammar rules whichneeds to be enabled again)
* Added a lot of freatures and cleand up the PythonScript module
* Started to merge som features from PythonScript back to Lua script
2011-08-07 MickeM
* Fixed a lot of issues with PythonScript module adding suport for alias and "raw command processing"
* Fixed issue with loading plugins and aliases as well as duplicate plugin detection
2011-08-01 MickeM
* Added new module: PythonScript
2011-07-25 MickeM
* merged in all 0.3.9 changes
* refactored where filter to be "non template" to drastically reduce compile time (as well as potentially size if I ever go dll instead of static link)
* streamlined checkeventlog toi be same as "the other" where filters as well as dropped support of "old" syntax.
2010-02-05
* Multiple fixes all over the place
* Availible modules: CheckExternalScripts, CheckHelpers, FileLogger, NRPEClient, NRPEServer, Scheduler
! Performance data is still missing (will be for a while yet)
2010-01-31 MickeM
+ Added google protocol buffers
! Changed internal handle command logic (now uses protocol buffers)
- Removed (temporarily) performance data (due to protocol buffer changes)
2010-01-19 MickeM
+ Rename NRPEListener to NRPEServer
+ Added NRPEServer to CMake build
Michael Medin
0.3.9 (re)Release: take 2
I have fixed two issues in the 0.3.9 release and update the binaries. They are also on their way to sourceforge so soon you can download them from there as well.
Changelog:
2011-09-02 MickeM - 0.3.9 take 2 * Fixed issue with CheckFile and filtering on times and dates * Fixed issue with check_battery * Added breakpad support to /about
Michael Medin
New (and final) Release Candidate for 0.3.8!
Hello google bot! (and some happy weeks even the yahoo bot).
I have just released the final (I hope) release candidate for the 0.3.8 version. It has a lot of new features and, I am especially, proud of the new event log filters.
For those who has not seen the eventlog filter I recommend reading up on the quick guide i wrote on the CheckEventLog/CheckEventLog page. It has a fairly good getting started guide I hope. But a quick note is that the new default filter is:
generated > -2d AND severity NOT IN ('success', 'informational')
Which I believe is a lot more readable the before.
Other news are many minor changes and fixes in the file7disk related checks as well as index in CheckCounter to allow handling multiple languages and locales.
The changelog grouped by module can be found here:
New commands - CheckSingleFile - to check spects of a single file use like so: CheckSingleFile file=d:\nrpe_512.pem warn=>100 check=line-count warn=>100 crit=>170 check=size - CheckSingleRegEntry CheckSingleRegEntry path=HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\MaxSize "syntax=%path%: %int%" warn==20971520 crit==20971520 check=int ShowAll=long Scripts - Cleaned up scripts folder - Added new "NagiosPlugin library" from op5 - Added check_no_rdp.vbs (Checks that no RDP connection is online) - Added check_battery.vbs which checks batterys via WMI - Added check_printer.vbs to check printers via WMI CheckExternalScript - Added new "script templating" thing to simplify adding scripts: [Wrapped Scripts] test=check_test.ps1 ; (will use correct template for running ps1 commands) - Fixed erroneous error message "Failed to peek buffer" NSCA - Added obfuscated_password to NSCA section - Added so "global" ([Settings] password=...) passwords are read from the NSCA module CheckEventLog - Brand new filter syntax based on SQL where clauses Avalible operators are: =, !=, >, <, >=, <=, eq, ne, gt, lt, ge, le, OR, AND, like, IN, NOT IN CheckCounter - Added new index option to CheckCounter to allow looking up index and thus you can use the same checks on multiple locales and also use characters not present in "NRPE charset) CheckCounter index "Counter=\1450(_Total)\1458" ShowAll MaxWarn=500 MaxCrit=1000 nsclient++ -noboot CheckSystem pdhlookup Utskrifter - Optional new "safe" PDH subsystem (slower, but possibly safer) pdh_subsystem=thread-safe - Added checks for missing counters to CheckCounter CheckDriveSize - Added volume support for CheckDriveSize (CHeckAll) like so: CheckDriveSize MinWarn=50% MinCrit=25% CheckAll=volumes FilterType=FIXED FilterType=REMOTE - Changed "missing" disks are now a critical error and not unknown - Improved CheckDriveSize bad FilterType error message - Added option to return error messages to the client [CheckDisk] show_errors=1 (defauilt is off 0) CheckFile2 - Dates are signed (means you can use neagitve dates to check the future) CheckFile2 debug path=D:\tmp\dates filter+creation=<-30m MaxWarn=1 MaxCrit=1 "syntax=%filename%: %creation%" CRITICAL:future.txt: C: Thursday, December 31, 2009 12:47:11, found files: 1 > critical|'found files'=1;1;1; - Added checks for missing path and missing filter on CheckFile2 thus - Fixed so files locked for reading can be checked (basic checks) - Improved speed of file chyecking (does not check file data twice) - Changed so missing files and such generate an error - Fixed major issue with date matching in CheckFile* which was not working at all. - Exe file version checks: CheckFile2 path=D:\tmp pattern=*.exe filter+version=!=6.0.2900.5512 "syntax=%filename%: %version%" MaxWarn=1 - Line count check: CheckFile2 path=D:\tmp pattern=*.txt filter+line-count=ne:3 "syntax=%filename%: %line-count%" MaxWarn=1 - Added ignore-errors to "ignore" any filesystem related errors (NOTICE this is probably not what you want) - Added master-syntax to CheckFile2 to change the overall message like so: %list%, %files%, %matches% CheckFile2 MinWarn=10 MinCrit=10 path=D:\WINDOWS\system32 filter+size=gt:0 truncate=10 ignore-errors "master-syntax=%matches%/%files%" - Added %user% to syntax to print user who generated message CheckEventLog file=application file=system filter=new filter=out MaxWarn=1 MaxCrit=1 filter-generated=>2w filter-severity==success filter-severity==informational truncate=1023 unique descriptions "syntax=%user% (%count%)" CRITICAL: (1), (2), NT INSTANS\SYSTEM (3), NT INSTANS\SYSTEM (3), NT INSTANS\SYSTEM (3), missing (3), missing (5), (4), missing (2), missing (2), missing (2), missing (2), (1), eventlog: 33 > critical|'eventlog'=33;1;1; Generic: - Added != to all string comparisons - Changes syntax of performance counters: Alias is '<alias> %' and it also has the "full" non % data as '<alias>' CheckDriveSize CheckAll MaxWarnUsed=80% MaxCritUsed=90% CRITICAL:CRITICAL: C:\: Total: 146G - Used: 140G (95%) - Free: 6.31G (5%) > critical, D:\: Total: 152G - Used: 148G (97%) - Free: 3.59G (3%) > critical|'C:\ %'=95%;80;90; 'C:\'=140.17G;117.18;131.83;0;146.48; 'D:\ %'=97%;80;90; 'D:\'=147.93G;121.21;136.3;0;151.52; - Added warning message ewhen numerical filters evaluate to zero (and are not 0) - added a new "option" in conjunction with -c you can now do -m to specify the module to load. nsclient++ -m CheckDisk.dll -c CheckDriveSize MaxWarn=100 CheckAll
Please try it and let me know, if nothing major pops up I will release 0.3.8 tomorrow.
Michael Medin
0.3.7 Released
New version out mainly a fix for the problems of 0.3.6 version.
Major changes:
* Added argument support to NRPE Client * Some additions and fixes CheckWMI * Improved installer (works on w2k8 etc) * NSCA feature and stability improvments * New command line switchs to easily use NSClient++ from external scripts * Added "firewall exception" to installer * Fixed an issue with the socket data buffer * Fixed issue with CheckExternalScripts and script_dir * Fixed issue with CheckDisk and paths * Documentation!
I think the major thing is the documentation apart from some bug fixes and installer improvements such. Regardless it is a recommended update.
NOTE It is late so I shall update sourceforge and what not tomorrow.
Michael Medin
Full changelog:
2009-10-11 MickeM + Added argument support to NRPE Client This is temporarily enabled by the same options under the NRPE section. BUT this will change int he future so be ware when using them. 2009-09-20 MickeM * Fixed alias in CheckWMI (now works) + Added columnSyntax to CheckWMI to allow formating of returned data (default is %column%=%value%) + Added columnSeparator to CheckWMI to allow formating of returned data (default is ", ") 2009-09-13 MickeM * Fixed some more issues with the installer should not "work" on Windows 2008 as well as slightly simpler to configure. 2009-09-06 MickeM + Added new option to [NSCA Agent] string_length=<size> of the NSCA_MAX_PLUGINOUTPUT_LENGTH option on the NSCA server. * Readded all the "installer configuration" crap which I accidentaly removed when I fixed the installer... *sigh* 2009-08-30 MickeM + Added -c and -d command line options like so: NSClient++ -c CheckFile2 path=c:\test pattern=*.txt MaxCrit=1 filter+written=gt:2h NSClient++ -c <command> <argument 1> <argument 2> ... -d Is the same thing but with debug enabled. + Added uninstall of old client (sort of broken but works) 2009-08-29 MickeM * Fixed issue with CheckFile (directory) * Rewrote the CA:s in the installer to work "better" (hopefully) in general it should be have more like a propper installer. 2009-07-18 MickeM * Fixed issue with no loggers avalible and "memory leak" * Added "firewall exception" to installer * Fixed an issue with the socket data buffer * Added new option to NSC.ini [NSCA] socket_timeout=30 (timeout in seconds when reading from NSCA sockets) * Fixed issue with NSCA socket. 2009-07-05 MickeM * Fixed issue with CheckExternalScripts and script_dir: not adding the commands properly. * Fixed issue with CheckExternalScripts and script_dir: not using relative paths (#310). 2009-06-20 MickeM * Fixed issue with CheckDisk and paths not working out properly
New nightly: Improved installer
New nightly build out. Mainly this has a much improved installer so please let me know how it work out.
Also if you have an old version of NSCLient++ (which is not upgraded/uninstalled propperly) send mt the install log (msiexec /l* log.txt /i <MSI>) so I can add it to the "uniinstall thingy" I have added.
There is also some fixes in the CheckFile department which fixes a few issues here and there.
Michael Medin
0.3.6 Release!
Finally after and long overdue is the new version here. This is a major update and a recommended one as there are memory leaks in the previous version.
The highlight in addition to all the fixes and minor things are the experimental new installer which allows you to configure some options while installing NSClient++. The installer should I hope work better and provide easier error handling and such. The only issue thus far are some reports on windows 2007 where it requires administrative privileges to install. I do not have windows 2007 so I cannot confirm this (if someone has windows a spare 2007 or want to sponsor this platform get in touch with me).
A few of the highlights:
* Improved installer * A lot of bugfixes and improvements * Serious memory leak fixed * Added a few new options to NSCA module * New service name and description * Improved CHeckFile2 (new option max-dir-depth, path, pattern) * Added support for changing name and description of service from the /install command line * Added more filter operators to all numeric filters so they accept eq:, ne:, gt:, lt: in addition to =, >, <, <>, !, !=, in: (#269) * Added better support for numerical hit matching in the eventlog module. You can now use exact and detailed matching. * Cleaned up the checkProcState code and it is not a lot better. * Added new option 16bit to checkProcState. When set checkProcState will enumerate all 16 bit processes found running under NTVDM. * Added new command line options pdhlookup and pdhmatch (to CheckSystem) to lookup index and names. * Added new module A_DebugLogMetrics.dll which can be used to generate debug info. * Brand new build environment based upon boost build!!! * Modified /about so it now shows a lot of useful(?) info.
For all changes refer to the changelog.
On a side not I will during the night switch over to a new host so hopefully the site will be more stable as well!
Michael Medin







rss
