SEC (Simple Event Correlator) 2.7.3

Introduction:
-------------
SEC is a tool for accomplishing event correlation tasks in the domains of 
log analysis, system monitoring, network and security management, etc.
Event correlation is a procedure where a stream of events is processed, 
in order to detect (and act on) certain event groups that occur within 
predefined time windows. Unlike most other event correlation products which
are heavyweight solutions, SEC is a lightweight and platform-independent
event correlator which runs as a single process.

Availability:
-------------
This program is distributed under the terms of GNU General Public License, 
and can be downloaded from http://simple-evcorr.sourceforge.net

Release Notes:
--------------
SEC has been tested primarily on Linux and Solaris, but since it is written 
in Perl and does not use any platform dependent subroutines, it should also
work on other OS platforms.
Because SEC is not tested against ancient Perl releases, it is recommended 
to run SEC with at least Perl 5.8 (see http://www.perl.org for the latest 
stable release). 
SEC uses Perl Getopt, POSIX, Fcntl, Socket, IO::Handle, and Sys::Syslog 
modules which are included in the standard Perl installation.

Files in this package:
----------------------
COPYING - copy of GNU General Public License
ChangeLog - changes starting from version 1.0
README - this file
contrib - SEC user contributions
sec - SEC program
sec.man - SEC man page

Author: 
-------
Risto Vaarandi (ristov at users d0t s0urcef0rge d0t net)

Acknowledgments:
----------------
This work is supported by SEB.
The author thanks the following people for supplying software patches,
documentation fixes, and suggesting new features:
Al Sorrell, David Lang, James Brown, Jon Frazier, Mark D. Nagel, Peter Eckel,
Rick Casey, and William Gertz.
Last but not least, the author expresses his profound gratitute to
John P. Rouillard for many great ideas and creative discussions that have
helped to develop SEC.
