Bro-IDS support in Prelude?
Robert Vineyard <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <[email protected]> |
Has anyone tried integrating a Bro-IDS sensor with Prelude? I have not been able to find native support on either side, but it seems like it would be possible either using the Prelude-LML to parse the Bro logs or to have Bro call a script that would generate an event within Prelude. I'm not opposed to writing the code myself, but I wanted to see if anyone was aware of an existing project to bridge these two applications. Thanks! -- [ Robert Vineyard | RHCE, Security+ ] [ [email protected] ] [ Information Security Engineer III ] [ 404.385.6900 | FAX 404.894.4690 ] [Finding a needle in a haystack isn't hard when every straw is computerized] _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-user