Re: [IDWG] Closing on IDMEF

Hi all,

Regarding applications using IDMEF I'm the maintainner of snort-idmef
(sf.net/projects/snort-idmef), an output plugin for the Open Source IDS
Snort as well as the co-author of libidmef (sf.net/projects/libidmef) which
is already conforming to draft 14 (using DTD).

From the feedback I got regarding those projects they are used in
educational as well as commercial environments.

snort-idmef is pending inclusion in the stock snort distribution btw.

Regarding DTD vs schema I don't have a special preference.

And one last note: I didn't receive much feedback for my asset proposal, an
addition to IDMEF for defining assets. As I understand that there is no
chance to be included in the current IDMEF how is the way for further
discussion on that issue.

Thank you,
Sandro

-- 
Telefonieren Sie schon oder sparen Sie noch?
NEU: GMX Phone_Flat http://www.gmx.net/de/go/telefonie