[Snort-users] Status of IDMEF support?

I'm trying to determine what the status of IDMEF support is with Snort.
The last entry in the ChangeLog for integrated IDMEF code with Snort
was from 2002-05-15, indicating that the output-plugin for IDMEF was
removed because it was broken.

The last activity from the Silicon Defense page on IDMEF
(http://www.silicondefense.com/idwg/snort-idmef/) was from 2003-1-15,
but there has been activity on the SourceForge project for the "Snort
IDMEF Plugin" as recent as a few weeks ago.

What's the status of using IDMEF with Snort? Any sanctioned advice from
the wise people at snort.org? Any other comments on where IDMEF is with
vendor implementations or standard approval are welcome as well.

Thanks.

-Joshua Wright
jwright@hasborg.com


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users