Re: IDMEF Implementations besides Snort?

Drew,

We have existing ones for Tripwire (Windows version), ZoneAlarm Pro, and 
the IPTables firewall (alerts on policy violations as defined in the rules 
file.) We have one partially working for the freeware Tripwire for Linux.

-Laura

At 01:51 PM 6/14/2002, Andrew Hintz (Drew) wrote:
>Does anyone know of any IDMEF output plugins/converters for existing
>IDSs or loggers, such as RealSecure, NFR, syslog, MS event log, etc?
>The only one that I'm aware of is the Silicon Defense IDMEF output
>plugin for Snort.
>
>Thanks in advance,
>--
>^Drew
>
>http://guh.nu
>
>--Begin PGP Fingerprint--
>3C6C F712 0A52 BD33 C518  5798 9014 CA99 2DA0 5E78
>--End PGP Fingerprint--