[Snort-users] IDMEF XML plugin 0.2

Joe McAlerney joey at ...47...
Fri Jun 1 21:06:15 EDT 2001


Greetings,

Silicon Defense is pleased to announce version 0.2 of the Intrusion
Detection Message Exchange Format (IDMEF) plugin.  IDMEF describes a
structure and transport facility of information between intrusion
detection systems and management systems. IDMEF is a product of the
Intrusion Detection Working Group (IDWG), which is working towards
making it an Internet standard. 

Notable changes include:

+ Conformance to version 0.3 of the IDMEF specification 
+ Support for SPADE anomaly detection messages, as well as portscan
plugin messages
+ Additional OS platform support 
+ Support for new reference information in Snort rules

The IDMEF XML plugin website - 
http://www.silicondefense.com/idwg/snort-dmef/
The plugin can be downloaded directly from:
http://www.silicondefense.com/idwg/snort-idmef/idmef-xml-plugin_0.2.tar.gz
Silicon Defense's IDWG website -
http://www.silicondefense.com/idwg/index.htm

Thanks - and Happy Sn0rting,

-Joe M.

-- 
|   Joe McAlerney     joey at ...155...   |
| Silicon Defense - Technical Support for Snort |
|       http://www.silicondefense.com/          |
+--                                           --+




More information about the Snort-users mailing list