[Prelude Hybrid IDS] #212: Problem with idmef-criteria-filter
"Prelude Hybrid IDS" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#212: Problem with idmef-criteria-filter ---------------------------------------+------------------------------------ Reporter: [email protected] | Owner: yoann Type: defect | Status: new Priority: normal | Milestone: Component: prelude-manager | Version: 0.9 Severity: normal | Keywords: ---------------------------------------+------------------------------------ Hello, Please I use the idmef-criteria-filter to filtre the alert but it dosn't work. [idmef-criteria-filter] rule = alert.analyser.process.name != 'crond(pam_unix)' hook = db Please if someone have an idea about this, please contact me : [email protected] Regards. -- Ticket URL: <https://trac.prelude-ids.org/ticket/212> Prelude Hybrid IDS <http://www.prelude-ids.org> The Prelude Hybrid Intrusion Detection System suite _______________________________________________ Prelude-devel site list [email protected] http://www.prelude-ids.org/mailman/listinfo/prelude-devel