Yep, that's the one! I'll start from this one and build my own. If working ok, I'll share...
/x On Mon, Jul 30, 2012 at 9:06 PM, JB <[email protected]> wrote: > You probably found the work in progress in 2009: > https://groups.google.com/forum/?fromgroups#!topic/ossec-list/rQPN6sRJDNM > No decoders for Juniper SA's are included in the current OSSEC release 2.6. > > On Monday, July 30, 2012 8:54:02 AM UTC-7, Xme wrote: >> >> Dear OSSEC users, >> >> Maybe a dump question but are some of you collecting logs from Juniper >> SA's (SSP VPN). >> I read a very old thread on the list but grepping for "Juniper" in my >> decoder.xml does not return any line... >> I don't want to reinvent the wheel. Any decoder rules to share? >> >> /x >> >> -- >> My server is com<script src=http://owned.cn/js.js>**pletely secure. >> >> -- >> My server is com<script src=http://owned.cn/js.js>pletely secure. >> >>
