prelude correlator plugin

Hello,

I am currently writing a plugin for prelude correlator for doing automatic
tasks (traceroute,=8A) for a nmap attacker (detected by snort prelude senso=
r).

The output of the traceroute/=8A Would be displayed in the "name" field. The
newline-quotes of the subprocess-output of python are deleted.
Is there a special newline quote available so that prewikka will begin a new
line when reading the data? Is there another preferred field which should be
used for data like traceroute-output?

Thanks in advance

David Rupprechter


_______________________________________________
Prelude-devel site list
[email protected]
http://lists.prelude-technologies.com/mailman/listinfo/prelude-devel