[Snort-users] IDMEF plugin for snort 2.6?

Jochen Kaiser Jochen.Kaiser at ...704...
Sun Jul 22 09:36:57 EDT 2007


Hi,

I need IDMEF output from snort for a research project.

Since the IDMEF plugin is a diff against 2.4.4 my question: is there another
plugin or method available from anyone?
Maybe there is a IDMEF proxy which gets a stream of events an generates
IDMEF messages? 

I would like a direct IDMEF output from snort. At the moment I query the 
ACID-SQL-database for certain events and generate an IDMEF message. 

Any ideas, hints?

regards,
JK




More information about the Snort-users mailing list