Snort mailing list archives
Re: xml plugins
From: "Gustavo Monteiro" <gfmonteiro () gmail com>
Date: Mon, 17 Jul 2006 15:24:58 -0200
Hmmm, good. Thanks Joel! Regards, On 7/17/06, Joel Esler <joel.esler () sourcefire com> wrote:
Gustavo, I usually recommend outputting to Unified output method. From there you can output it through barnyard to about any output module you'd like (BASE, Sguil, Syslog, tcpdump...) Joel On Mon, Jul 17, 2006 at 10:49:35AM +0200, Guillaume Vissian sent me:Thank you for your quick answer, but in reality the point which interest me in the xml plugin described by the CERT, was that i could send to another application the snort output (on the network...). Do you know anyway to do that ? In fact i have see that there is a socket output capacity, but there is no option and no docs about it Thanks by advance On 7/14/06, Gustavo Monteiro <gfmonteiro () gmail com> wrote:Hi Guillaume, You could use a plugin for snort called IDMEF. More information at http://sf.net/projects/snort-idmef. On 7/13/06, Guillaume Vissian <somebodyishere () gmail com> wrote:Hi list, I'm currently trying to use the snort xml plugin but snort return anerror: plugin unknown ..... is there any option other that enable the library suggested on the cert website ? the --enable-xml option doesn't seems to be present .... has somebody test this plugin ? Thanks by advance for your help G.V.-------------------------------------------------------------------------Using Tomcat but need to do more? Need to support web services,security?Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on ApacheGeronimohttp://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users-- Gustavo Monteiro------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users+---------------------------------------------------------------------+ Joel Esler Senior Security Consultant 1-706-627-2101 Sourcefire Security for the /Real/ World -- http://www.sourcefire.com Snort - Open Source Network IPS/IDS -- http://www.snort.org GPG Key: http://demo.sourcefire.com/jesler.pgp.key AIM:eslerjoel YMSG:eslerjoel Gtalk:eslerj +---------------------------------------------------------------------+
-- Gustavo Monteiro ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- xml plugins Guillaume Vissian (Jul 13)
- Re: xml plugins Gustavo Monteiro (Jul 14)
- Re: xml plugins Guillaume Vissian (Jul 17)
- Re: xml plugins Joel Esler (Jul 17)
- Re: xml plugins Gustavo Monteiro (Jul 17)
- Re: xml plugins Guillaume Vissian (Jul 17)
- Re: xml plugins Gustavo Monteiro (Jul 14)
- Re: xml plugins Jeff Nathan (Jul 19)