Re: [RFC patch prelude-lml] Add Deep Packet Inspection support for NetScreen v1

Hi Jerome,


Le mardi 04 novembre 2008 à 18:51 +0100, Jerome Benoit a écrit : 
> Le Fri, 31 Oct 2008 22:40:04 +0100,
> Jerome Benoit <[email protected]> a écrit :
> > Add Deep Packet Inspection alert support to prelude-lml ruleset for
> > NetScreen.
> > 
> > Any comments are welcome. 
> 
> No developers seem to care about support for new syslog event ... ? 

We do care about it, and please let me thank you for your contribution!
Reviewing addition to the code might take some time, please bear with
us, we'll come back to you with feedback soon.

> I'm working on integrating prelude-ids for a very heterogeneous and
> large scale (more than 1500 security devices) I.S. for 3 customers to
> centralize security events, it might be interesting to have my work
> upstreamed ... 
> 
> - New syslog event for prelude-lml (Netscreen and FortiNet to begin
> with)
> - New correlation event for prelude correlator (and bug fixes,
> beta3 in very buggy ...)


That sound really great, we're looking forward including your
contributions!

Concerning Prelude-Correlator beta3, please report any bug that might
have hit you on https://trac.prelude-ids.org : this will allow us to
track and correct the issue before the official release.

> I'm giving back the rights on the code to the prelude inc.

Thanks!
Keep up the good work!

-- 
Yoann Vandoorselaere | Responsable R&D / CTO | PreludeIDS Technologies
Tel: +33 (0)9 50 70 21 58                  Fax: +33(0)9 57 25 21 58
http://www.prelude-ids.com

_______________________________________________
Prelude-devel site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-devel