Re: IDMEF XML

Yoann Vandoorselaere <[email protected]>
Newsgroups gmane.comp.security.ids.prelude.user
Message-ID <1203069884.6003.85.camel@arwen>
Hi Raymond,

Le mardi 05 février 2008 à 11:54 +0100, raymond durand a écrit :
> I would like to know if IDMEF alerts exchanged between prelude-lml and
> prelude-manager are based on XML format or another binary structure.

They are based on an IDMEF binary implementation. IDMEF-XML
compatibility is provided at the Prelude-Manager level (output to
IDMEF-XML). 

> Indeed, I found this sentence on the Prelude-IDS website and so I am a
> little bit confused about that point:
> "the Prelude project has written a home-made implementation of the
> IDMEFspecification, using binary structure, and preserving original
> datatype used
> to carry specific data"
> 
> The idea behind this question is to integrate IDMEF XML capable sensors with
> prelude-managers.
> Is it posible ?

It is currently possible to import IDMEF-XML message within Prelude
using the Prelude-Import program, which is available from
http://www.prelude-ids.com

Regards,

-- 
Yoann Vandoorselaere | Responsable R&D / CTO | PreludeIDS Technologies
Tel: +33 (0)8 70 70 21 58                  Fax: +33(0)4 78 42 21 58
http://www.prelude-ids.com

_______________________________________________
Prelude-user site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-user
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.