Snort mailing list archives
Status of IDMEF support?
From: Joshua Wright <jwright () hasborg com>
Date: Tue, 27 Jan 2004 15:31:39 -0500
I'm trying to determine what the status of IDMEF support is with Snort. The last entry in the ChangeLog for integrated IDMEF code with Snort was from 2002-05-15, indicating that the output-plugin for IDMEF was removed because it was broken.
The last activity from the Silicon Defense page on IDMEF (http://www.silicondefense.com/idwg/snort-idmef/) was from 2003-1-15, but there has been activity on the SourceForge project for the "Snort IDMEF Plugin" as recent as a few weeks ago.
What's the status of using IDMEF with Snort? Any sanctioned advice from the wise people at snort.org? Any other comments on where IDMEF is with vendor implementations or standard approval are welcome as well.
Thanks. -Joshua Wright jwright () hasborg com ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Status of IDMEF support? Joshua Wright (Jan 27)
- Re: Status of IDMEF support? Joe McAlerney (Jan 27)