<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Dear community,<br>
<p>I am pleased to announce the second major versions of IntelMQ and
IntelMQ Manager. <b>A big thanks goes to all the contributors
engaging and contributing to this project!</b><br>
</p>
<p>Before migrating, have a look at the NEWS file:
<a class="moz-txt-link-freetext" href="https://github.com/certtools/intelmq/blob/maintenance/NEWS.md">https://github.com/certtools/intelmq/blob/maintenance/NEWS.md</a><br>
</p>
Installation instructions:<br>
<a class="moz-txt-link-freetext"
href="https://github.com/certtools/intelmq/blob/2.0.0/docs/INSTALL.md">https://github.com/certtools/intelmq/blob/2.0.0/docs/INSTALL.md</a><br>
Upgrade instructions:<br>
<a class="moz-txt-link-freetext" href="https://github.com/certtools/intelmq/blob/2.0.0/docs/UPGRADING.md">https://github.com/certtools/intelmq/blob/2.0.0/docs/UPGRADING.md</a><br>
The release is available also in the unstable deb/rpm repositories:<a
class="moz-txt-link-freetext"
href="https://software.opensuse.org/download.html?project=home:sebix:intelmq:unstable&package=intelmq"><br>
https://software.opensuse.org/download.html?project=home:sebix:intelmq:unstable&package=intelmq</a><br>
It is <b>not</b> yet available in the stable repositories, I will
do that in the next weeks or with the next bugfix release, depending
on whether there are some issues popping up.
<p>Some numbers on the bots compared to the first major release:</p>
<p>8 new collectors since 1.0, now 21 in total<br>
16 new parsers since 1.0, now 59 in total<br>
37 new documented feeds since 1.0, now 138 in total<br>
2 new experts since 1.0, now 24 in total<br>
2 new outputs since 1.0, now 15 in total<br>
On 4th April I wrote a summary about new features to the
developer's list:
<a class="moz-txt-link-freetext" href="https://lists.cert.at/pipermail/intelmq-dev/2019-April/000293.html">https://lists.cert.at/pipermail/intelmq-dev/2019-April/000293.html</a><br>
Here is a short summary for the core's most important new features
including the links to documentation:<br>
</p>
<ul>
<li>AMQP is available as alternative broker additionally to redis.
I do <b>not</b> recommend yet to migrate if you are not
familiar with RabbitMQ (an AQMP implementation). I'd still like
to get more feedback on this feature.<br>
<a class="moz-txt-link-freetext" href="https://github.com/certtools/intelmq/blob/">https://github.com/certtools/intelmq/blob/</a><code>maintenance</code>/docs/User-Guide.md#amqp-beta</li>
<li>Supervisor can be used as replacement for intelmqctl's own
pid-based process management<br>
<a class="moz-txt-link-freetext" href="https://github.com/certtools/intelmq/blob/">https://github.com/certtools/intelmq/blob/</a><code>maintenance</code>/docs/User-Guide.md#using-supervisor-as-process-manager-beta<br>
Note that there is also a script to generate systemd service
files for intelmq bots:
<a class="moz-txt-link-freetext" href="https://github.com/certtools/intelmq/tree/maintenance/contrib/systemd">https://github.com/certtools/intelmq/tree/maintenance/contrib/systemd</a><br>
</li>
<li>Multithreading: By proving the parameter <code>instances_threads
you can set the number of threads for a bot, works for most
bots.<br>
<a class="moz-txt-link-freetext" href="https://github.com/certtools/intelmq/blob/maintenance/docs/User-Guide.md#multithreading-beta">https://github.com/certtools/intelmq/blob/maintenance/docs/User-Guide.md#multithreading-beta</a></code></li>
<li>Statistics: Mostly relevant for power users and developers,
the bots save load statistics, not stable yet. Discussion is
here: <a class="moz-txt-link-freetext" href="https://github.com/certtools/intelmq/issues/1274">https://github.com/certtools/intelmq/issues/1274</a></li>
<li>You can switch between /opt and LSB-paths with an environment
variable:
<a class="moz-txt-link-freetext" href="https://github.com/certtools/intelmq/blob/maintenance/docs/User-Guide.md#opt-and-lsb-paths">https://github.com/certtools/intelmq/blob/maintenance/docs/User-Guide.md#opt-and-lsb-paths</a></li>
<li>"Named queue" or "paths" have already been introduced in 1.1,
allowing multiple *different* destination pipelines. The filter
expert supports named queues, potentially reducing the number of
needed filter bots:
<a class="moz-txt-link-freetext" href="https://github.com/certtools/intelmq/blob/maintenance/docs/Bots.md#possible-paths">https://github.com/certtools/intelmq/blob/maintenance/docs/Bots.md#possible-paths</a>
Using the sieve expert, you can set the paths for the messages
too.</li>
<li>The separated malware name mapping since 1.1:
<a class="moz-txt-link-freetext" href="https://github.com/certtools/intelmq/tree/maintenance/contrib/malware_name_mapping">https://github.com/certtools/intelmq/tree/maintenance/contrib/malware_name_mapping</a></li>
<li>The transparent usage of `extra.*` fields since 1.1.<br>
</li>
<li>And <b>a lot</b> of changes in the bots, it is impossible to
list them here<br>
</li>
</ul>
<p>For the IntelMQ Manager:</p>
<ul>
<li>The configuration tab shows the number of queued messages
live, name of queues ("paths"), management and monitoring
features. Physics can be permanently turned off (the state is
saved). With the new shortcuts, you can do some actions with
keyboard only.</li>
<li>List and array parameters are shown correctly as JSON/JS.<br>
</li>
<li>The management allows to manage bot groups (intelmqctl's
--group feature).</li>
<li>The monitor page has an advanced inspection tool and further
allows management of the bot.</li>
<li>Error handling and communication to the user: Instead of
alerts a message box shows a summary and counter of errors
messages.<br>
</li>
<li>Many more and lots of improvements under the hood<br>
</li>
</ul>
<p>I am sure that I forgot something here ;) so for the full
changelogs please refer to the repository:</p>
<p><a class="moz-txt-link-freetext" href="https://github.com/certtools/intelmq/blob/develop/CHANGELOG.md">https://github.com/certtools/intelmq/blob/develop/CHANGELOG.md</a><br>
<a class="moz-txt-link-freetext" href="https://github.com/certtools/intelmq-manager/blob/develop/CHANGELOG.md">https://github.com/certtools/intelmq-manager/blob/develop/CHANGELOG.md</a><br>
<img src="cid:part3.832D9AE5.C64040F4@cert.at" alt="Co-financed by
the Connecting Europe Facility of the European Union"
class="shrinkToFit transparent" moz-do-not-send="false"
title="Co-financed by the Connecting Europe Facility of the
European Union" width="500" height="87"></p>
<pre class="moz-signature">--
// Sebastian Wagner <a class="moz-txt-link-rfc2396E" href="mailto:wagner@cert.at"><wagner@cert.at></a> - T: +43 1 5056416 7201
// CERT Austria - <a class="moz-txt-link-freetext" href="https://www.cert.at/">https://www.cert.at/</a>
// Eine Initiative der nic.at GmbH - <a class="moz-txt-link-freetext" href="https://www.nic.at/">https://www.nic.at/</a>
// Firmenbuchnummer 172568b, LG Salzburg
</pre>
</body>
</html>