[prev in list] [next in list] [prev in thread] [next in thread] 

List:       prelude-user
Subject:    [prelude-user] switch cisco with prelude-lml
From:       yoann.v () prelude-ids ! com (Yoann Vandoorselaere)
Date:       2007-09-21 7:39:20
Message-ID: 1190360360.31697.222.camel () localhost
[Download RAW message or body]

Le vendredi 14 septembre 2007 ? 00:16 +0200, neorom a ?crit :
> I have just corrected the problem. In fact the ruleset didn't parsed
> the event I was looking for, so I had developped it. It was the event
> concerning "administration of the switch by a user".

Could you provide the developed rule, as well as some log samples, so
that it might get included in future LML releases?

Regards,

-- 
Yoann Vandoorselaere | Responsable R&D / CTO | PreludeIDS Technologies
Tel: +33 (0)8 70 70 21 58                  Fax: +33(0)4 78 42 21 58
http://www.prelude-ids.com


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic