Snort Forums Archive

Archive Home » Snort Development » XML over SSL Output Plugin for Correlation Engine

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

XML over SSL Output Plugin for Correlation Engine

Posted by jberry on March 15, 2005 04:52:11

I have written my own aggregation/correlation engine for security events and the last piece is having Snort log directly to it using XML messages sent over an SSL encrypted tunnel. I am not much of a C programmer (the aggregation/correlation piece was written in Perl) so I am having a tough time. Could someone help me out here? My plugin segfaults Snort after a short amount of time.

Posted by jberry on March 15, 2005 04:52:36

Forgot to give contact info: jberry@penson.com

Posted by phorvati on July 29, 2005 11:13:15

Did you have to compile Snort for xml output. If not, which binary release is built with xml output plugin.
I get an error: unknown output plugin 'xml' when I run and I tried many versions.
Petar