libidmef-users — Libidmef users mailing list

[libidmef-users] =?iso-2022-jp?b?GyRCJDQ+UjJwJE43byRLJEQkJCRGGyhC?=

[<at...@ya...>]

  ┏━━━━━━━━━━━━━━━━━━━━━━━━━━━┓ 
　　☆　　人妻との○秘の出会い　　　 
　　　☆彡 　　　　　　 　　完全永久無料の大人の社交場
　┗━━━━━━━━━━━━━━━━━━━━━━━━━━━┛ 

　大人のお付き合い〜割り切った交際♪ＳＥＸが大好きだから・・・

　旦那では物足りない♪貴方の○○○が欲しいの・・・・・・・・・

☆。・:*:．・★,。・:*:．☆。・:*:．・★,☆。・:*:．・★,。・:*:．☆ 

完全永久無料⇒　http://i-lav.com/r20/index.php?media=pc734

☆。・:*:．・★,。・:*:．☆。・:*:．・★,☆。・:*:．・★,。・:*:．☆
　

《登録女性紹介》
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
★仁美　２７歳

★コメント
結婚１年目ですが家庭に何だか疲れてきました。もっと遊びたいよう〜〜〜
結婚前は遊んでいたので楽しかったケド、今は本当につまらない生活を
送っています。誰か遊ぼうよ。ヨロシク♪

返信入口⇒　http://i-lav.com/r20/index.php?media=pc734

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
★斉藤　由美　３１歳

★コメント
旦那に浮気されていました。仕返しじゃないけど私もたまには他の男に
抱かれたいなって思っています。条件は結婚していて一夜限りの付き合いを
希望しています。出来れば金曜日が都合がいいかな！

返信入口⇒　http://i-lav.com/r20/index.php?media=pc734

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
★足立　京子　３４歳

★コメント
結婚してもう７年になります。だから旦那はもう私とエッチしてくれないです。
旦那は他で多分エッチしてるからいいけど、私は全然してないし、エッチしたいです。
私はかなりのＳです。

返信入口⇒　http://i-lav.com/r20/index.php?media=pc734

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[libidmef-users] =?iso-2022-jp?b?GyRCJCpFRU9DJE43bxsoQg==?=

[<in...@ho...>]

お待たせしました。
無料でご紹介しますよ。好みを聞かせてください。
http://www.kimini-aitai.com/adv01ytrds/
今すぐ会って☆☆☆したいという女性を紹介
http://www.kimini-aitai.com/adv01ytrds/
*********************
fen...@si...
*********************

[libidmef-users] =?iso-2022-jp?b?GyRCSVROUSF3JTklOSVhGyhC?=

[<lm...@ho...>]

愛すべき人妻と僕の思い出
http://do-do-do.net/ri/
不倫推進委員会
nix...@ya...

[libidmef-users] =?iso-2022-jp?B?GyRCJSQlQSU0JEckOSEjGyhC?=

[<lm...@ho...>]

女性のストレス要因トップは「夫」そして妻は・・・。
http://acooo.com/ichie/
問）
kat...@in...

[libidmef-users] =?iso-2022-jp?B?GyRCPVBNaCRrQ0skTiU5JUYhPCU/JTk+cEpzGyhC?=

[<lm...@ho...>]

ＲＯＹＡＬ　本日オープン
http://aacvv.com/roroyal/
===問い合わせ====
ban...@br...：

[libidmef-users] =?iso-2022-jp?B?PRskQiRIJC8kOyRzGyhCPQ==?=

[<lm...@ho...>]

ココまで積極的な人妻たち・・・抱かれてみたい。
http://carmastorra.com/sen/
詢問
et...@56...

[libidmef-users] =?iso-2022-jp?B?GyRCJTslVSVsQzUkNyRON2hEakhHIVojRyNXRkM9OCFbGyhC?=

[<ge...@ho...>]

出会いのチャンス到来
http://solo-s.com/sefsef/
問）
xi...@wa...

[libidmef-users] =?iso-2022-jp?B?GyRCIXk9dyROO1IkTjBsSFZCZ0BaJEokYiROIXkbKEI=?=

[<ao...@ho...>]

研究熱心なギャルが増加中！
http://j-movie.org/fresh/
問）
xi...@wa...

[libidmef-users] Error configuring snort-idmef plugin

[<p.s...@qu...>]

Hi list,

I'm trying to build snort-idmef on Redhat Fedora Core 4:

- snort-2.3.3.tar.gz
- libidmef-1.0.2-alpha.tar.gz
- snort-idmef-plugin-2.0.0alpha.tar.gz

I've followed the instructions in INSTALL (e.g. apply diffs, 
copy spo_idmef files and run autoconf) but my configure 
breaks.

i.e. ./configure --enable-idmef --enable-ps-list

gives

---snip---
./configure: line 9207: syntax error near unexpected token 
`LIBIDMEF,'
./configure: line 9207: `               PKG_CHECK_MODULES
(LIBIDMEF, libidmef >=
1.0.2-alpha, LIBS="$LIBS $LIBIDMEF_LIBS" CFLAGS="$CFLAGS 
$LIBIDMEF_CFLAGS")'
---snip---

Anyone come across this error before?

Thanks,

Paul

[libidmef-users] libidmef on Mac os X

[knackko <kn...@fr...>]

Hi,
It is known by the devoppers that libidmef is not supported on Mac os X 
but i am wondering is there nobody here who tried it and was 
successfull in this task?

Tell me, thank you a lot.

[libidmef-users] New LibIDMEF BETA release available for testing

[Adam C. M. <ad...@mi...>]

All,
libidmef-0.7.3_beta-6 is available for download via: http://people.migus.org/~adam/downloads.xml or
SourceFORGE.  There's Redhat/Fedora RPMS as well as the
source tar.bz2 file.  Please direct any issues to the mailing list.

Thanks,
-- 
Adam C. Migus -- http://people.migus.org/~adam/

[libidmef-users] your message dated [Wed Jun 23 04:37:49 PDT 2004]

[<de...@co...>]

was trapped by my mail filter before I received it.

This can happen when I am 'Bcc'd, if I was part of a mailing list,
or something other than my email addr was on the To: line.

Please resend your message to 

	re...@co...

and I will correct the problem so it does not happen in the future.

Thanks.
The Mgmt. (aka Cogwheel aka Bob C)

WARNING: 

  UNSOLICITED COMMERCIAL EMAIL WILL BE REPORTED AS ABUSE TO 
  YOUR INTERNET SERVICE PROVIDER. 

  FRAUD SCHEMES SUCH AS '419 ADVANCE FEE' SOLICITATIONS
  WILL BE REPORTED TO LAW ENFORCEMENT AGENCIES IN YOUR COUNTRY

[libidmef-users] your message dated [Tue Jun 22 04:35:51 PDT 2004]

[<de...@co...>]

was trapped by my mail filter before I received it.

This can happen when I am 'Bcc'd, if I was part of a mailing list,
or something other than my email addr was on the To: line.

Please resend your message to 

	re...@co...

and I will correct the problem so it does not happen in the future.

Thanks.
The Mgmt. (aka Cogwheel aka Bob C)

WARNING: 

  UNSOLICITED COMMERCIAL EMAIL WILL BE REPORTED AS ABUSE TO 
  YOUR INTERNET SERVICE PROVIDER. 

  FRAUD SCHEMES SUCH AS '419 ADVANCE FEE' SOLICITATIONS
  WILL BE REPORTED TO LAW ENFORCEMENT AGENCIES IN YOUR COUNTRY

[libidmef-users] (ad)Web Tools & Internet Domain Free Auction: Visit NOW !

[<he...@ns...>]

Sorry for interrupting you - click refuse
<mailto:ma...@ns...>  for no more mail... =09
=A1=A1 =09
- Welcome to NabiTel's <http://www.nabitel.com/English.asp>  software
products and portal services - =09
Software Products =09
 <http://www.Nabitel.com/English.asp>=20

Web Robot: also called web spider or web crawler, collects useful web
page informations by navigating world wide web sites.=20

Download free trial version now ! <http://www.nabitel.com/English.asp>=20

 <http://www.Nabitel.com/English.asp>  	eMail ID Collector/Sender:
Collects/sends email ids publicly opened on various web pages, with good
intention.=20

Download free trial version now ! <http://www.nabitel.com/English.asp>=20

 <http://www.Nabitel.com/English.asp>  =09
Web Server Performance Tester: Do you want to verify whether your or
customers web server has sufficient capacity? You have to pay a lots of
money to do so! Use our Web Stress! Its very cheap but very powerful and
practical! The price? Only $20! Purchase it now! You can create new
business items with Web Stress.=20

Download free trial version now ! <http://www.Nabitel.com/English.asp> =20
Portal Services =09
 <http://www.domainlinkers.com/English.asp>  	Domain Auction: Do you
want to sell or buy Internet domains? The DomainLinkers.com is the best
place to deal your domains! Do no t hesitate to visit NOW!

Sell or Buy Internet Domains !
<http://www.domainlinkers.com/English.asp>=20

Have a nice day.  Thank you. =09

[libidmef-users] (ad)Strong WebRobot/eMailId Collector: Free Download !

[<he...@ns...>]

Sorry for interrupting you - click refuse
<mailto:ma...@ns...>  for no more mail... =09
=A1=A1 =09
- Welcome to NabiTel's <http://www.nabitel.com/English.asp>  software
products and portal services - =09
Software Products =09
 <http://www.Nabitel.com/English.asp>=20

Web Robot: also called web spider or web crawler, collects useful web
page informations by navigating world wide web sites.=20

Download free trial version now ! <http://www.nabitel.com/English.asp>=20

 <http://www.Nabitel.com/English.asp>  	eMail ID Collector: Collects
email ids publicly opened on various web pages.=20

Download free trial version now ! <http://www.nabitel.com/English.asp>=20

Portal Services =09
 <http://www.nabitel.com/English.asp>  	Web Portal: Do you have your own
home page and want to broadcast it all over the world ? Register your
home page to NabiTel Portal Now !! (nabi=3Da butterfly)

Register your home page now, it's free !
<http://www.nabitel.com/English.asp>=20

 <http://www.AllThatCars.com/English.asp>  	Automobiles: Do you want
to sell or buy automobiles ? Cars, trucks, limos, airplanes, ships,....
All That Cars are here !

Register your vehicles now, it's free !
<http://www.AllThatCars.com/English.asp>=20

 <http://www.AllThatComputers.Com>  	Computers: Do you want to sell
or buy computers ? PCs, printers, scanners, servers, mainframes, ....
All That Computers are here !=20

Register your computers now, it's free !
<http://www.AllThatComputers.com/English.asp>=20

 <http://www.AllThatFoods.Com/English.asp>  =09
Food & Restaurants: Are you seeking for a nice place to eat ? Or do you
run a restaurant ? Foods of the world, restaurants of the world, ....
All That Foods are here !=20

Register your restaurant now, it's free !
<http://www.AllThatFoods.com/English.asp>=20

Have a nice day.  Thank you. =09

[libidmef-users] Re: [Snort-users] snort-1.8.7 could find libidmef

[Joe M. <jo...@Si...>]

Hi Dave,

Couple of things.

1) Make sure you are using libidmef 0.6.3 for the current Snort plugin
2) You will get an "libidmef library (idmef) not found ...." message if
any of the libraries dependencies are also not found, i.e. libntp, or
libxml2.  Make sure those are both installed, and use the
--with-libxml2-libraries=, and --with-libntp-libraries= configure tags.
3) Make sure /usr/local/lib is in your /etc/ld.so.conf file (if your os
has one).  If it's not in there, add the line and run "ldconfig".

If you are still having problems, contact
lib...@li....

Just FYI, the IDMEF plugin for Snort 1.9 has been 95% done for quite
some time now.  The development team has simply been busy on other
projects.  We believe the plugin will be finished within the next two
weeks.

Thanks,

-Joe

-- 
Joe McAlerney
Silicon Defense: IDS Solutions

snort bsd wrote:
> 
> Hi:
> 
> need help!
> 
> i am tryting to get snort-1.8.7 working with libidmef.
> my option were --enable-idmef
> --with-libidmef-libraries=/usr/local/lib. well, it
> found idmefxml.h alright, but could not find library
> for libmef:
> 
> checking for newIDMEF_message in -lidmef... no
> configure: error: libidmef library (idmef) not found
> in /usr/local/lib
> 
> checked the library /usr/local/lib/libidmef.la and it
> is there.
> 
> any ideas?
> 
> tia
> 
> _dave
> 
> http://mobile.yahoo.com.au - Yahoo! Messenger for SMS
> - Always be connected to your Messenger Friends
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Snort-users mailing list
> Sno...@li...
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

[libidmef-users] IDMEF Message Parsing error from Buffer

[Rajesh M. <ra...@in...>]

Hi All,

I will be using LibIdmef-0.7.2 for parsing IDMEF Messages(Alert/Heratbeat).
For this I  will be using 'get_idmef_message( )' or 
'get_idmef_message_from_file( )' APIs to parse.
I able to successfully complete the parsing of IDMEF by using 
'get_idmef_message_from_file( )' , but, have problem in using 
'get_idmef-message()' .

Problem is in the parsing of 'Alert' element, instead of getting current 
element name to process as 'Alert' , it is showing current element name as 
'text', following is  portion of debug output near the error:

version of xml doc 1
no of alert 1(parse_message) next element is text -- calling parse_alert()
error parsing alert
not a valid IDMEF-Message

But I able to successfully print document contents by using 
'xmlDebugDocument()' and current node by using 'xmlDebugDumpNode()' API's 
of 'libxml2'.

However I am  not getting any errors in parsing the same 'Alert' message 
with 'get_idmef_message_from_file' .

Could you please any body suggest reason for this?

Thank you,
Rajesh

Re: [libidmef-users] Re: help with libidmef-0.6.3 -- Got it

[Joe M. <jo...@Si...>]

Joseph,

Glad it worked out for you.  Let us know if you run into additional
problems.

-Joe M.

-- 
Joe McAlerney
Silicon Defense: IDS Solutions

Joseph M Kuitche wrote:
> 
> Good morning Joe,
> I checked the output of ./configure and realized that it was giving an error
> related to the libxml2 includes. That's because I installed the RPM package of
> libxml2, which does not create the includes files. So I went ahead and
> downloaded the zip file of libxml2 and reinstalled it. Then I recompiled the
> libidmef with the appropriate directory of the libxml2 includes. Everything
> seems to be ok.
> Thank you very much for your help.
> 
> Quoting Joe McAlerney <jo...@Si...>:
> 
> > Actually, I was looking for the output of ./configure.  Something is
> > going wrong, because the Makefile is not being created.  Make sure you
> > remove config.cache before running ./configure again.
> >
> > -Joe M.
> >
> > --
> > Joe McAlerney
> > Silicon Defense: IDS Solutions
> >
> > Joseph M Kuitche wrote:
> > >
> > > make: *** No targets specified and no makefile found. Stop.
> > >
> > > That's the one line error message I receive.
> > > Thanks
> > >
> > > Quoting Joe McAlerney <jo...@Si...>:
> > >
> > > > Hello Joseph,
> > > >
> > > > This would suggest that there was an error in the configure
> > process
> > > > and
> > > > the Makefile was not created.  Can you post the error message you
> > get?
> > > >
> > > > Thank you,
> > > >
> > > > -Joe M.
> >
> 
> Joseph M Kuitche
> Arizona State University
> College of Tech and Applied Sc
> Computer Engineering Tech
> Graduate Student
> Mesa, AZ 85212
> Tel: (H) 480-884-1084 (W) 480-727-1220
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> PC Mods, Computing goodies, cases & more
> http://thinkgeek.com/sf
> _______________________________________________
> libidmef-users mailing list
> lib...@li...
> To modify your list options, or to unsubscribe, visit
> https://lists.sourceforge.net/lists/listinfo/libidmef-users

[libidmef-users] Re: help with libidmef-0.6.3 -- Got it

[Joseph M K. <ku...@as...>]

Good morning Joe,
I checked the output of ./configure and realized that it was giving an error 
related to the libxml2 includes. That's because I installed the RPM package of 
libxml2, which does not create the includes files. So I went ahead and 
downloaded the zip file of libxml2 and reinstalled it. Then I recompiled the 
libidmef with the appropriate directory of the libxml2 includes. Everything 
seems to be ok.
Thank you very much for your help.

Quoting Joe McAlerney <jo...@Si...>:

> Actually, I was looking for the output of ./configure.  Something is
> going wrong, because the Makefile is not being created.  Make sure you
> remove config.cache before running ./configure again.
> 
> -Joe M.
> 
> -- 
> Joe McAlerney
> Silicon Defense: IDS Solutions
> 
> Joseph M Kuitche wrote:
> > 
> > make: *** No targets specified and no makefile found. Stop.
> > 
> > That's the one line error message I receive.
> > Thanks
> > 
> > Quoting Joe McAlerney <jo...@Si...>:
> > 
> > > Hello Joseph,
> > >
> > > This would suggest that there was an error in the configure
> process
> > > and
> > > the Makefile was not created.  Can you post the error message you
> get?
> > >
> > > Thank you,
> > >
> > > -Joe M.
> 



Joseph M Kuitche
Arizona State University
College of Tech and Applied Sc
Computer Engineering Tech
Graduate Student
Mesa, AZ 85212
Tel: (H) 480-884-1084 (W) 480-727-1220

[libidmef-users] Re: help with libidmef-0.6.3

[Joe M. <jo...@Si...>]

Actually, I was looking for the output of ./configure.  Something is
going wrong, because the Makefile is not being created.  Make sure you
remove config.cache before running ./configure again.

-Joe M.

-- 
Joe McAlerney
Silicon Defense: IDS Solutions

Joseph M Kuitche wrote:
> 
> make: *** No targets specified and no makefile found. Stop.
> 
> That's the one line error message I receive.
> Thanks
> 
> Quoting Joe McAlerney <jo...@Si...>:
> 
> > Hello Joseph,
> >
> > This would suggest that there was an error in the configure process
> > and
> > the Makefile was not created.  Can you post the error message you get?
> >
> > Thank you,
> >
> > -Joe M.

[libidmef-users] Re: help with libidmef-0.6.3

[Joseph M K. <ku...@as...>]

make: *** No targets specified and no makefile found. Stop.

That's the one line error message I receive.
Thanks

Quoting Joe McAlerney <jo...@Si...>:

> Hello Joseph,
> 
> This would suggest that there was an error in the configure process
> and
> the Makefile was not created.  Can you post the error message you get?
> 
> Thank you,
> 
> -Joe M.
> 
> -- 
> Joe McAlerney
> Silicon Defense: IDS Solutions
> 
> Joseph M Kuitche wrote:
> > 
> > Here is what I did:
> > I first intalled libxml2-2.4.23 and libxml2-devel-2.4.23, then ntp.
> > Then I proceeded with libidmef-0.6.3 as follow:
> > # tar xvzf libidmef-0.6.3.tar.gz
> > # cd lididmef-0.6.3
> > # ./configure --with-<ntp source dir>
> > # make
> > 
> > At this point, I got an error message saying it has stopped b/c no
> Makefile. I
> > looked in the directory and there was no Makefile generated, only
> Makefile.am
> > and Makefile.in
> > 
> > 
> > Quoting James Hoagland <hoa...@Si...>:
> > 
> > > At 6:44 PM -0700 7/9/02, Joseph M Kuitche wrote:
> > > >Dear Sir,
> > > >I'm planning to use the libidmef-0.6.3 with the Snort IDMEF
> plugin.
> > > After
> > > >extracting and compiling the zip file, I don't find "Makefile",
> > > >which obviously
> > > >causes the "make" to fail.
> > > >Am I doing something wrong?
> > >
> > > Joseph,
> > >
> > > I'm not sure why you e-mailed us in particular (the POCs for
> libidmef
> > > are cc'd), but I think that what you are missing is running
> > > ./configure first.  That generates a custom Makefile for you.
> > >
> > > Good luck,
> > >
> > >    Jim
> > > --
> > > |*      Jim Hoagland, Associate Researcher, Silicon Defense     
> *|
> > > |*            --- Silicon Defense: IDS Solutions ---            
> *|
> > > |*  hoa...@Si..., http://www.silicondefense.com/ 
> *|
> > > |*   Voice: (530) 756-7317                 Fax: (530) 756-7297  
> *|
> > >
> > 
> > 7001 E Williams Field Road
> > Bldg 250, Box 1807
> > Mesa, AZ 85212
> > Tel: (H) 480-884-1084 (W) 480-727-1220
> 



7001 E Williams Field Road
Bldg 250, Box 1807
Mesa, AZ 85212
Tel: (H) 480-884-1084 (W) 480-727-1220

Re: [libidmef-users] Re: Snort with idmef support

[Ryan R. <ry...@si...>]

Joe McAlerney wrote:

>Hello Ricardo,
>
>Sorry for the message delay, I was on holiday this past week. Glad to
>hear you are interested in working with IDMEF.  I think I know where the
>problem is.  The current IDMEF plugin requires libidmef 0.6.3 and not
>0.7.X.  A newer version of the plugin that is compatible with libidmef
>0.7.2 (with IDXP incorporated) is being developed, but has been delayed
>due to complications with IDXP.  Ryan Ripken is heading that effort.  He
>may be able to give you a better time frame then I.
>
>Please let us know if you run into further problems.  Good luck!
>
>-Joe M.
>
>  
>


I think we are going to do a release sometime soon (couple of days) of 
an updated plugin version and minor changes to libidmef.  IDXP support 
is going to be held off for the moment but I hope to add it in soon.

[libidmef-users] Re: Snort with idmef support

[Joe M. <jo...@Si...>]

Hello Ricardo,

Sorry for the message delay, I was on holiday this past week. Glad to
hear you are interested in working with IDMEF.  I think I know where the
problem is.  The current IDMEF plugin requires libidmef 0.6.3 and not
0.7.X.  A newer version of the plugin that is compatible with libidmef
0.7.2 (with IDXP incorporated) is being developed, but has been delayed
due to complications with IDXP.  Ryan Ripken is heading that effort.  He
may be able to give you a better time frame then I.

Please let us know if you run into further problems.  Good luck!

-Joe M.

-- 
Joe McAlerney
Silicon Defense: IDS Solutions


Ricardo Lebre wrote:
> 
> Hi Joe, my name is Ricardo. I'm sorry to bother you with such a small
> matter question, but i'm having a problem compiling Sort with idmef
> support. When I run configure:
> 
> " ./configure --enable-idmef --enable-flexresp
> --with-libxml2-includes=/usr/local/include/libxml2/
> --with-libntp-libraries=/usr/local/src/ntp-4.1.1a/"
> 
> I get the following:
> 
> "
> checking for snprintf... yes
> checking for strlcpy... no
> checking for strlcat... no
> checking for strerror... yes
> checking for floor in -lm... yes
> checking for pcap_datalink in -lpcap... yes
> checking for gzopen in -lz... yes
> checking for /usr/local/include/libxml2//libxml/tree.h... yes
> checking for xmlNewNode in -lxml2... yes
> checking for ntp source directory (includes and libraries)... yes
> checking for /usr/local/include/libidmef/idmefxml.h... yes
> checking for newIDMEF_Message in -lidmef... no
> configure: error: libidmef library (idmef) not found in /usr/local/lib
> "
> 
> Although my /usr/local/lib's content is the following:
> "/usr/local/lib/libidmef.a   /usr/local/lib/libidmef.so
> /usr/local/lib/libidmef.so.0.7.2
> /usr/local/lib/libidmef.la  /usr/local/lib/libidmef.so.0"
> 
> Is there anything i'm doing wrong. Any ideas would be appreciated...
> 
> Just one other thing. I've read at Snort-users that you were working
> with some people at Harvey Mudd to incorporate the IDXP transport
> protocol in with the plugin. Are you still working on it? Do you have a
> forecast when it will be ready?
> 
> Thanks in advance,
> 
>         Ricardo Lebre
>         INESC-ID, GSD

[libidmef-users] Re: snort-1.8.6 configure error with idmef xml pluggin

[Joe M. <jo...@Si...>]

Hello,

First thing, you need to use libidmef-0.6.3 with the current IDMEF
plugin for Snort.  An enhanced version of the plugin is being developed
for use with the most recent version of libidmef (0.7.1).  Make sure you
remove the 0.7.1 libraries manually before you install 0.6.3 as "make
install" will not overwrite more recent versions of the library.

If you have any more problems, feel free to let us know!

Thanks,

-Joe M.

-- 
Joe McAlerney
Silicon Defense: IDS Solutions

he...@gs... wrote:
> 
> hello,
> I am attempting to install snort-1.8.6 with the XML output plugin on an x86 Redhat 7.0 machine.I installed ntp4.1.1a, libxml2-2.4.22-1 and libxml2-devel-2.4.22-1 via rpm and libidmef-0.7.1. All seemed to go well.
> 
> When I run: ./configure --enable-idmef --with-libntp-libraries=/home/hem/ntp-4.1.1a/libntp
> 
> The following is returned:
> ---skip---
> checking for gzopen in -lz... yes
> checking for /usr/local/include/libxml/tree.h... yes
> checking for xmlNewNode in -lxml2... yes
> checking for ntp source directory (includes and libraries)... yes
> checking for /usr/local/include/libidmef/idmefxml.h... yes
> checking for newIDMEF_Message in -lidmef... no
> configure: error: libidmef library (idmef) not found in /usr/local/lib
> 
> The contents of the /usr/local/lib directory are as follows:
> libidmef.a  libidmef.so  libidmef.so.0.7.1  libidmef.la lbidmef.so.0  libpcap.a
> 
> Can you give me some suggestion? Thanks!

[libidmef-users] libidmef 0.7.1 Release

[Joe M. <jo...@Si...>]

The libidmef development team is pleased to announce the release of
libidmef 0.7.1.

This release is compliant with version 0.7 of the IDMEF specification.  

Notable changes include:

+ Addition of IDMEF parsing and c struct -> xml generation code
(courtesy of NAI)
+ Removal of the libntp dependency
+ Additional cross platform compatibility
+ IDMEF version 0.7 compliance

We have also moved the source tree to SourceForge, and have created two
mailing lists to better serve user and developer needs.  You can visit
the project homepage for more information.

I'd also like to point out that we have added a few new members to the
team, and expect to pick up the development pace in the months to come. 
Thank you to all who have contributed to the project already.

Project Homepage:  http://www.silicondefense.com/idwg/libidmef/
SourceForge Info:  http://sourceforge.net/projects/libidmef/
Direct Download:  
http://www.silicondefense.com/idwg/libidmef/libidmef-0.7.1.tar.gz

Kind Regards,

Joe McAlerney (jo...@si...)
Adam Migus (am...@ti...)