[libidmef-users] IDMEF Message Parsing error from Buffer

[Rajesh M. <ra...@in...>]

Hi All,

I will be using LibIdmef-0.7.2 for parsing IDMEF Messages(Alert/Heratbeat).
For this I  will be using 'get_idmef_message( )' or 
'get_idmef_message_from_file( )' APIs to parse.
I able to successfully complete the parsing of IDMEF by using 
'get_idmef_message_from_file( )' , but, have problem in using 
'get_idmef-message()' .

Problem is in the parsing of 'Alert' element, instead of getting current 
element name to process as 'Alert' , it is showing current element name as 
'text', following is  portion of debug output near the error:

version of xml doc 1
no of alert 1(parse_message) next element is text -- calling parse_alert()
error parsing alert
not a valid IDMEF-Message

But I able to successfully print document contents by using 
'xmlDebugDocument()' and current node by using 'xmlDebugDumpNode()' API's 
of 'libxml2'.

However I am  not getting any errors in parsing the same 'Alert' message 
with 'get_idmef_message_from_file' .

Could you please any body suggest reason for this?

Thank you,
Rajesh