Great! By the way: how differ OSSEC from the prelude-lml?
/Tomas Daniel Cid wrote: > Hi Tomas, > > Sebastien Tricaud sent us a patch to add support for IDMEF on ossec, > so it can communicate with Prelude. If you are interested in alpha > versions, you can try it out at: > > http://www.ossec.net/files/snapshots/ossec-hids-070927.tar.gz > > *Just need to run the following before compiling: cd src; make > setprelude; cd ..; > > Thanks, > > -- > Daniel B. Cid > dcid ( at ) ossec.net > > On 9/25/07, Tomas Olsson <[EMAIL PROTECTED]> wrote: > >> Hi, >> >> Has anybody done any work on converting OSSEC alerts into IDMEF >> (http://www.rfc-editor.org/rfc/rfc4765.txt)? >> >> /Tomas >> >> >>