[IDMEF][Issue 11] Informational messages
Herve Debar <[email protected]> Fri, 09 Jan 2004 10:09:54 +0100
| Newsgroups | gmane.ietf.idwg |
|---|---|
| Organization | France Telecom R et D |
| Message-ID | <[email protected]> |
From Krzysztof Zaraska: There is a need for INFORMATIONAL messages. For example, a honeypot traffic is by definition anomalous, however it should be treated differently whether it's malicious or not. Maybe these could be implemented as alert messages with severity = 0? Hervé: I'd like to wait a bit to see if issue 10 provides a solution that also solves this. Hervé -- Hervé Debar <mailto:[email protected]> Tel: +33 (0)2 31 75 92 61 GSM: +33 (0)6 74 09 09 66 France Télécom R&D Fax: +33 (0)2 31 75 93 13 42 rue des Coutures (--) BP 6243 (--) F-14066 Caen Cedex 4