Re: idmef-criteria help
Yoann Vandoorselaere <[email protected]> Tue, 01 Mar 2011 10:45:30 +0100
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <1298972730.2574.52.camel@arwen> |
SGkgQ2hyaXMsCgpMZSBsdW5kaSAyOCBmw6l2cmllciAyMDExIMOgIDEyOjAyIC0wNTAwLCBDaHJp cyBIYWdlciBhIMOpY3JpdCA6Cj4gSSBoYXZlbid0IGJlZW4gYWJsZSB0byB1c2UgaWRtZWYtY3Jp dGVyaWEgb3IgdGhyZXNob2xkaW5nIHRvIHdvcmsgZm9yCj4gbWUgYXQgYWxsLiBJIGRlY2lkZWQg dG8gdHJ5IHNvbWV0aGluZyB0aGF0IHNob3VsZCBiZSBmYWlybHkgc2ltcGxlOgo+IGhhdmUgYWxs IGFsZXJ0cyBmcm9tIGFsbCBzZW5zb3JzIGdvIGludG8gdGhlIGRhdGFiYXNlLCBidXQgb25seSBo YXZlCj4gYWxlcnRzIHdpdGggYSBzZXZlcml0eSBvZiBtZWRpdW0gb3IgaGlnaCB0cmlnZ2VyIHRo ZSBzbXRwIHBsdWdpbi4KPiAKPiBJIGZpcnN0IHRyaWVkIHRoaXMgYWxvbmU6Cj4gCj4gKioqKioq KioqKioqKioqKioqKioqKioqKioqKioqCj4gW2lkbWVmLWNyaXRlcmlhPWxvd10KPiBydWxlID0g YWxlcnQuYXNzZXNzbWVudC5pbXBhY3Quc2V2ZXJpdHkgPT0gbG93Cj4gaG9vayA9IGRiCj4gKioq KioqKioqKioqKioqKioqKioqKioqKioqKioqCj4gCj4gQnV0IGZvciBzb21lIHJlYXNvbiB0aGF0 IGNhdXNlcyBQcmVsdWRlIE1hbmFnZXIgdG8gaWdub3JlIGV2ZXJ5dGhpbmcKPiB3aXRoIGEgaGln aCBvciBtZWRpdW0gc2V2ZXJpdHkuIAoKVGhhdCdzIGV4cGVjdGVkIDogeW91IGFyZSBzZXR0aW5n IHVwIGEgZmlsdGVyIHNheWluZyB0byBwYXNzIG9uIG9ubHkKZXZlbnRzIHRoYXQgbWF0Y2ggdGhl ICdhbGVydC5hc3Nlc3NtZW50LmltcGFjdC5zZXZlcml0eSA9PSBsb3cnIGZpbHRlcgp0byB0aGUg ZGF0YWJhc2UgcGx1Z2luLiBPdGhlciBldmVudHMgZm9yIHRoZSBkYXRhYmFzZSBwbHVnaW4gd2ls bCB0aHVzCmJlIGRpc2NhcmRlZC4KCgo+IEluIG90aGVyIHdvcmRzLCB3aGVyZSBJIHdhcyByZWNl aXZpbmcKPiBtZXNzYWdlcyBvZiBhbnkgc2V2ZXJpdHkgYm90aCBpbiB0aGUgZGF0YWJhc2UgYW5k IHZpYSBzbXRwIGJlZm9yZQo+IHNwZWNpZnlpbmcgYW55IGlkbWVmLWNyaXRlcmlhLCBhZGRpbmcg dGhlIG9uZSBsaW5lIGFib3ZlIHJlc3VsdGVkIGluCj4gbG93IGFsZXJ0cyBnb2luZyBpbnRvIHRo ZSBkYXRhYmFzZSBhbmQgaGlnaC9tZWRpdW0gYWxlcnRzIGJlaW5nCj4gaWdub3JlZCBjb21wbGV0 ZWx5OiBubyBzbXRwLCBubyBkYi4gIEkgZm91bmQgdGhhdCBiZWhhdmlvciB1bmV4cGVjdGVkCj4g KGFuZCBhbHNvIHVuZG9jdW1lbnRlZCAtIGlmIGEgY2F0Y2gtYWxsIHJ1bGUgaXMgbmVlZGVkLCBz dWNoIGlzIG5vdAo+IHN0YXRlZCBhbnl3aGVyZSBpbiB0aGUgZG9jdW1lbnRhdGlvbikgYnV0IEkg YWRkZWQgYSBzZWNvbmQgcnVsZToKPiAKPiAqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioK PiBbaWRtZWYtY3JpdGVyaWE9bG93XQo+IHJ1bGUgPSBhbGVydC5hc3Nlc3NtZW50LmltcGFjdC5z ZXZlcml0eSA9PSBsb3cKPiBob29rID0gZGIKPiAKPiBbaWRtZWYtY3JpdGVyaWE9bWVkaGlnaF0K PiBydWxlID0gYWxlcnQuYXNzZXNzbWVudC5pbXBhY3Quc2V2ZXJpdHkgPT0gbWVkaXVtCj4gcnVs ZSA9IGFsZXJ0LmFzc2Vzc21lbnQuaW1wYWN0LnNldmVyaXR5ID09IGhpZ2gKPiBob29rID0gc210 cAo+ICoqKioqKioqKioqKioqKioqKioqKioqKioqKioqKgoKSW4gb3JkZXIgdG8gaGF2ZSBhbGwg ZXZlbnRzIGdvaW5nIHRvIHRoZSBwcmVsdWRlIGRhdGFiYXNlLCBhbmQgb25seQptZWRpdW0vaGln aCBzZXZlcml0eSBldmVudHMgZ29pbmcgdG8gdGhlIFNNVFAgcGx1Z2luLCBvbmx5IHRoaXMgcnVs ZQpzaG91bGQgYmUgbmVlZGVkOgoKW2lkbWVmLWNyaXRlcmlhPW1lZGhpZ2hdCnJ1bGUgPSBhbGVy dC5hc3Nlc3NtZW50LmltcGFjdC5zZXZlcml0eSA9PSAobWVkaXVtfHxoaWdoKQpob29rID0gc210 cAoKTm90ZSB0aGF0ICdhbGVydC5hc3Nlc3NtZW50LmltcGFjdC5zZXZlcml0eSA9PSAobWVkaXVt fHxoaWdoKScgaXMganVzdCBhCnF1aWNrIHdheSBvZiB3cml0aW5nICdhbGVydC5hc3Nlc3NtZW50 LmltcGFjdC5zZXZlcml0eSA9PSBtZWRpdW0gfHwKYWxlcnQuYXNzZXNzbWVudC5pbXBhY3Quc2V2 ZXJpdHkgPT0gaGlnaCcKCj4gVGhlIHByb2JsZW0gY3JlYXRlZCBieSB0aGF0IHNlY29uZCBydWxl PyBMb3cgc2V2ZXJpdHkgbWVzc2FnZXMgZ28gdG8KPiB0aGUgZGF0YWJhc2UsIGhpZ2ggYW5kIG1l ZGl1bSBnbyB0byBzbXRwIC0gb25seSAtIGFuZCBuZXZlciBnZXQKPiBlbnRlcmVkIGludG8gdGhl IGRhdGFiYXNlLgo+IAo+IEkgZXZlbiB0cmllZCBhZGRpbmcgdHdvIGhvb2tzIHRvIHRoZSBzZWNv bmQgaWRtZWYtY3JpdGVyaWEuLi4KPiAKPiBob29rPWRiCj4gaG9vaz1zbXRwCgpUaGlzIGlzbid0 IGNvcnJlY3QsIG9ubHkgb25lIHJ1bGUgLyBob29rIGNhbiBiZSBzcGVjaWZpZWQgYnkgcGx1Z2lu Cmluc3RhbmNlLgoKClJlZ2FyZHMsCgotLSAKWW9hbm4gVmFuZG9vcnNlbGFlcmUgfCBEaXJlY3Rl dXIgVGVjaG5pcXVlL0NUTyB8IFByZWx1ZGUgVGVjaG5vbG9naWVzClRlbDogKzMzICgwKTEgNDAg MjQgNjUgMTAgICAgICAgICAgICAgICAgICAgRmF4OiArMzMgKDApMSA0MCAyNCA2NSAyOApodHRw Oi8vd3d3LnByZWx1ZGUtdGVjaG5vbG9naWVzLmNvbQoKX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18KUHJlbHVkZS11c2VyIHNpdGUgbGlzdApQcmVsdWRlLXVz ZXJAcHJlbHVkZS10ZWNobm9sb2dpZXMuY29tCmh0dHA6Ly9saXN0cy5wcmVsdWRlLXRlY2hub2xv Z2llcy5jb20vbWFpbG1hbi9saXN0aW5mby9wcmVsdWRlLXVzZXI=