[Bro-Dev] IDMEF support

Seth Hall seth at icir.org
Sat Dec 10 18:31:18 PST 2011


On Dec 10, 2011, at 5:20 PM, Matthias Vallentin wrote:

> What are our ambitions for IDMEF support in 2.0? Is it worth
> including/documenting or should we deprecate it?


Deprecate it.  I think we'll be bringing it back before too long, but the current support is completely broken for multiple reasons.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/




More information about the bro-dev mailing list