Status of IDMEF support?

[Joshua Wright <jwright () hasborg com>]

I'm trying to determine what the status of IDMEF support is with Snort. 
 The last entry in the ChangeLog for integrated IDMEF code with Snort 
was from 2002-05-15, indicating that the output-plugin for IDMEF was 
removed because it was broken.

The last activity from the Silicon Defense page on IDMEF 
(http://www.silicondefense.com/idwg/snort-idmef/) was from 2003-1-15, 
but there has been activity on the SourceForge project for the "Snort 
IDMEF Plugin" as recent as a few weeks ago.

What's the status of using IDMEF with Snort?  Any sanctioned advice from 
the wise people at snort.org?  Any other comments on where IDMEF is with 
vendor implementations or standard approval are welcome as well.

Thanks.

-Joshua Wright
jwright () hasborg com


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users