[Dshield] Cisco 806

Jeff Kell jeff-kell at utc.edu
Wed Mar 5 06:55:11 GMT 2003


Wayne Larmon wrote:

> Jeff, what more does the existing Perl client need?  And can I help?  The
> Cisco client got to its current state by me adding regexes for all the Cisco
> sample log lines that people sent me.   Are you saying that it needs more
> regexes to match different types of lines?

Yes, mostly PIX.  Actually, IOS has[/will have] XML logging as an 
option, which would make parsing easier :-)

Jeff



More information about the list mailing list