Re: [Prelude Hybrid IDS] #98: SHADOW (NIDS) sensor

#98: SHADOW (NIDS) sensor
-----------------------+----------------------------------------------------
 Reporter:  anonymous  |        Owner:  yoann
     Type:  task       |       Status:  new  
 Priority:  normal     |    Milestone:       
Component:  generic    |      Version:       
 Severity:  normal     |   Resolution:       
 Keywords:  shadow     |  
-----------------------+----------------------------------------------------
Comment (by anonymous):

 Replying to [comment:5 yoann]:
 > What about creating a project page for the SHADOW->Prelude project, and
 closing this ticket?
 > Additionally, you might host the SHADOW project page on the trac
 .prelude-ids.org wiki if you wish.
 >
 After a long think and debate with myself about this 'feature' , I don't
 see the point to keep this active for Prelude. I rather see a connection
 between session data (e.g. sancp, Argus (raplude)) and full content data
 (tcpdump, snort (in dump mode) or daemonlogger).
 Also the current 'support/contribution' for SHADOW is already long gone
 and very outdated.

 I'm already looking for possibilities to use the session data with full
 content in Prewikka. Although at the moment I need to finish my project
 first.

 I will (as I said before) come back to you on this, to see what the
 possibilities are to include this in Prewikka.

 In the mean time, you can close this ticket. Unless you think otherwise to
 keep this going...

 Regards,

 Robin

-- 
Ticket URL: <https://trac.prelude-ids.org/ticket/98#comment:6>
Prelude Hybrid IDS <http://www.prelude-ids.org>
The Prelude Hybrid Intrusion Detection System suite
_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel