[ossec-list] Re: OSSEC and Prelude

[Sebastien Tricaud]

    | Daniel,
    |   I think thats a logical solution. Since OSSEC is an HIDS and not a
    | NIDS, using the IP of the HIDS would be ideal. That would enable prelude
    | to correlate events better.
    |

I totally agree.