any OSSEC rule/decoder experts out there?

[dninja at gmail.com (Robin Wood)]

2009/12/23 dan (ddp) <ddpbsd at gmail.com>:
> I wouldn't call myself an expert, but I can try to look at it.
> Haven't seen much (any?) real flaming on the ossec list.
> Everyone's generally helpful.

I've not joined the ossec list as this is probably a one off project
but I'll send you the stuff off list and when/if it is is good enough
to release I'll join and and release it.

Robin

> dan
>
> On Wed, Dec 23, 2009 at 9:26 AM, Robin Wood <dninja at gmail.com> wrote:
> > Hi
> > I'm writing a new OSSEC decoder and set of rules and would like
> > someone to have a quick look at what I'm doing before I release
> > anything.
> >
> > As this is my first experience with OSSEC I want to prevent a "I can't
> > believe you did it like that" if what I'm writing is rubbish!
> >
> > Robin
> > _______________________________________________
> > Pauldotcom mailing list
> > Pauldotcom at mail.pauldotcom.com
> > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > Main Web Site: http://pauldotcom.com
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com