Net/FSE User Community - Data Type Support This forum is for discussions about data types supported by Net/FSE or types to be included in future releases. The forum also covers information on the creation custom data type handlers (user defined). http://netfse.org/support/list.php?3 Tue, 07 Sep 2010 08:09:45 -0500 Phorum 5.2.9a http://netfse.org/support/read.php?3,18,18#msg-18 New log formats for 0.3 release (no replies) http://netfse.org/support/read.php?3,18,18#msg-18
    [*] Snort
    [*] Juniper NetScreen 5400
    [*] Bluecoat web proxy
    [*] Squid web proxy

We have made data type integration a key focus of the latest release. Deploying new formats is easy and we are eager to help people integrate new data feeds into Net/FSE>]]> BenUphoff Data Type Support Mon, 06 Sep 2010 13:55:35 -0500 http://netfse.org/support/read.php?3,5,5#msg-5 New Data Type Requests (no replies) http://netfse.org/support/read.php?3,5,5#msg-5 BenUphoff Data Type Support Wed, 13 May 2009 21:29:20 -0500 http://netfse.org/support/read.php?3,4,4#msg-4 IPFW Logs (no replies) http://netfse.org/support/read.php?3,4,4#msg-4 /etc/nfse/local.cnf if it is not already there. The value 3 in the example below is a unique ID for the data type. It doesn't matter what the number is it just has to be unique and can never be changed.

Type::class nfse.dataset.firewall.IPFWRecord 3 IPFW]]> BenUphoff Data Type Support Wed, 13 May 2009 21:04:43 -0500 http://netfse.org/support/read.php?3,3,3#msg-3 IPTables Logs (no replies) http://netfse.org/support/read.php?3,3,3#msg-3 /etc/nfse/local.cnf if it is not already there. The value 4 in the example below is a unique ID for the data type. It doesn't matter what the number is it just has to be unique and can never be changed.

Type::class nfse.dataset.firewall.IPTablesRecord 4 IPTables]]> BenUphoff Data Type Support Wed, 13 May 2009 20:59:34 -0500 http://netfse.org/support/read.php?3,2,2#msg-2 Apache2 Logs (no replies) http://netfse.org/support/read.php?3,2,2#msg-2 Apache2 documentation for more information on Apache 2 logging. You will need to add a line like the one below to the end of /etc/nfse/local.cnf if it is not already there. The value 5 in the example below is a unique ID for the data type. It doesn't matter what the number is it just has to be unique and can never be changed.

Type::class nfse.dataset.apache.Apache2AccessRecord 5 Apache2]]> BenUphoff Data Type Support Wed, 13 May 2009 20:51:52 -0500