DESCRIPTION

 XML::IDMEF - A perl module for easily creating/parsing IDMEF messages

 IDMEF module is a wrapper around XML::DOM and XML::Parser, providing an
 interface designed to simplify the parsing and creation of IDMEF messages.
 IDMEF is an XML based standard for representing Intrusion Detection alert
 messages (http://www.silicondefense.com/idwg/).

 The interface provided by XML::IDMEF is designed to make it very simple
 to build an IDMEF message while parsing a log file with a key-value
 structure, which is the most common situation when writing a log export
 module for a given software.


 ******* WARNING ******* WARNING ******* WARNING ******* WARNING *******

  This release (>0.11) introduces major internal changes compared
  with the previous versions. Furthermore, it implements the most
  *final* version of IDMEF.

  You'd hence better check that using this version of the module
  does not break anything in your code (it should not, but, well...
  you know...)

  And of course: this is a beta release and has not been thoroughly
  tested. Please try it out if you can and report success/failure to
  the author ([email protected]).

  Use in production systems is at your own risks.

 ******* WARNING ******* WARNING ******* WARNING ******* WARNING *******


PREREQUISITES

 Requires XML::DOM and a XML::Parser.


BUILDING/INSTALLING

 Once the archive is unpacked, use these commands:

     perl Makefile.PL
     make
     make test
     make install

 If for some reason, you can't run these commands, you can simple copy
 the IDMEF.pm file to your lib/XML directory. To find out which paths
 perl uses to locate modules, do
 'perl -e "print join(\"\n\", @INC), \"\n\";"'


STATUS

 This version is a beta release, and has not yet been thoroughly
 tested in production environment. It has been succesfully run on both
 linux and openbsd.
 If you encounter any problems installing or running this release, please
 email the author and provide him as much information as possible on the
 bug and its context.

 Please send any feedback to the author: [email protected]


NEW IN THIS RELEASE

 The IDMEF DTD is compliant with the IDMEF rfc draft 12.
 Improved test sequences.
 See 'Changes' for a detailed historic.

BUGS

 XML::IDMEF uses internally a simplified version of the IDMEF DTD, which makes
 that this module will fail to create some very specific IDMEF messages.
 In particular, recursive File tags are not accepted.


COPYRIGHT

 Copyright 2002 Erwan Lemonnier.

 This module is free software under BSD license.