Re: Please help with IDXP...

Joseph,

The current Snort IDMEF plugin does not support transport over IDXP.  A 
new version of the plugin is being developed to include this, as well as 
conform to the latest version of the IDMEF spec.  There have been some 
snags in trying to implement IDXP.  Ryan Ripkin would be able to explain 
this further, as he is heading those efforts.

-Joe M.

--
Joe McAlerney
Silicon Defense: IDS Solutions

On Monday, July 1, 2002, at 12:29 AM, Joseph M Kuitche wrote:

> Dear Sirs,
> I am trying to get into the IDS field. As part of my Masters project, I 
> want
> to be able to convert the output from an IDS into the IDMEF format, 
> then send
> it to another IDS via IDXP. I intend to use the Snort plugin, but I am 
> stuck
> on the transport protocol. How can I create an IDXP interface to Snort 
> for
> that purpose?
> I would greatly appreciate your help of any kinds, as I am running out 
> of
> time. Both my advisor and I are just trying to explore the field.
> Thanks for your time.
>
> Joseph M Kuitche
> Arizona State University
> Graduate Student in Computer Eng Tech
> Mesa, AZ 85212
> Tel: (H) 480-884-1084 (W) 480-727-1220
>
> _______________________________________________
> Idxp mailing list
> [email protected]
> http://lists.codefactory.se/mailman/listinfo/idxp
>
>