[prev in list] [next in list] [prev in thread] [next in thread] 

List:       prelude-devel
Subject:    Re: [prelude-devel] Re: [Prelude Hybrid IDS] #36: Introduce a
From:       Yoann Vandoorselaere <yoann () prelude-ids ! org>
Date:       2004-11-24 15:55:28
Message-ID: 1101311728.1784.93.camel () arwen ! prelude-ids ! org
[Download RAW message or body]

On Wed, 2004-11-24 at 16:32 +0100, Till Dörges wrote:
> Hi,
> 
> Prelude Hybrid IDS wrote:
> 
> > #36: Introduce a backward compatible version of 'classic' database plugin
> [...]
> >   * status:  new => closed
> >   * resolution:  None => wontfix
> > 
> > Comment:
> > 
> >  Backward compatibility on schema modification is possible however since
> >  from 0-8 to 0-9 the IDMEF structure evolved a lot, and since frontends are
> >  only aware of newer IDMEF version, there is no way to maintain
> >  compatibility at this level. Thus making a backward compatibility plugin
> >  for 0-8 kind of database is not constructive since frontend won't be able
> >  to query theses data anyway.
> 
> But just to make sure: Will it be possible to import data from a
> 0.8-style DB into a 0.9-style DB?

Since the IDMEF draft changed critically (remember it is still only a
draft, not yet standardized), this is probably not going to be possible.

If this is an absolute requirement for you, then I would suggest that
once 0-9 is released, you ask the Prelude project official company
(which is in the process of being created by me, and which will hire
Prelude and IDMEF developers) to provide support for this issue.

The good side of things is that there won't be any major IDMEF change to
expect once 0-9 is released, since IDMEF is being finalized (from 0.8 to
0.9, IDMEF jumped from revision 5 to revision 12).

-- 
Yoann Vandoorselaere <yoann@prelude-ids.org>


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic