From idwg-l-manager@Mail.ac.hmc.edu Tue Jul 20 13:11:02 2004 Received: from mail2.ac.hmc.edu (Mail.AC.HMC.Edu [134.173.32.22]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA06204 for ; Tue, 20 Jul 2004 13:11:01 -0400 (EDT) Received: from mail2.ac.hmc.edu (localhost [127.0.0.1]) by mail2.ac.hmc.edu (8.12.10/8.12.10) with ESMTP id i6KFmN41001330 for ; Tue, 20 Jul 2004 08:52:05 -0700 Received: (from majordomo@localhost) by mail2.ac.hmc.edu (8.12.10/8.12.7/Submit) id i6KFmNV1001329 for idwg-l-outgoing; Tue, 20 Jul 2004 08:48:23 -0700 X-Authentication-Warning: mail2.ac.hmc.edu: majordomo set sender to owner-idwg-l@mail2.ac.hmc.edu using -f Received: from psmtp.com (exprod7mx52.postini.com [12.158.38.102]) by mail2.ac.hmc.edu (8.12.10/8.12.10) with SMTP id i6KFmH41001294 for ; Tue, 20 Jul 2004 08:48:17 -0700 Received: from source ([134.173.42.99]) by exprod7mx52.postini.com ([12.158.38.251]) with SMTP; Tue, 20 Jul 2004 08:48:17 PDT Received: by turing.cs.hmc.edu (Postfix, from userid 13403) id DC04354347; Tue, 20 Jul 2004 08:48:16 -0700 (PDT) Date: Tue, 20 Jul 2004 08:48:16 -0700 From: Mike Erlinger To: intrusion detection wg Subject: [owner-idwg-l@hmc.edu: BOUNCE idwg-l@mail2.ac.hmc.edu: Non-member submission from [Internet-Drafts@ietf.org]] Message-ID: <20040720154816.GB6794@cs.hmc.edu> Reply-To: mike@cs.hmc.edu Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="ReaqsoxgOBHFXBhH" Content-Disposition: inline User-Agent: Mutt/1.4.2.1i X-pstn-levels: (S:35.81276/99.86694 R:95.9108 P:95.9108 M:100.0000 C:83.1967 ) X-pstn-settings: 3 (1.0000:2.0000) s gt3 gt2 gt1 r p m C X-pstn-addresses: from [db-null] X-Spam-Status: No, hits=0.0 required=8.0 tests=none autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on mail2.ac.hmc.edu Sender: owner-idwg-l@hmc.edu Precedence: bulk --ReaqsoxgOBHFXBhH Content-Type: text/plain; charset=us-ascii Content-Disposition: inline -- Mike Erlinger, Professor and Chair Computer Science www: http://www.cs.hmc.edu/~mike email: mike@cs.hmc.edu smail: Computer Science Dept., Harvey Mudd College, 301 E. 12th Street, Claremont, CA, 91711 909-621-8912, FAX: 909-607-8364 --ReaqsoxgOBHFXBhH Content-Type: message/rfc822 Content-Disposition: inline X-Mail-Format-Warning: Bad RFC2822 header formatting in >From mike Mon Jul 19 12:53:45 2004 Return-Path: X-Original-To: mike@cs.hmc.edu Delivered-To: mike@cs.hmc.edu Received: from mail2.ac.hmc.edu (Mail.AC.HMC.Edu [134.173.32.22]) by turing.cs.hmc.edu (Postfix) with ESMTP id 4CD16539D4 for ; Mon, 19 Jul 2004 12:53:44 -0700 (PDT) Received: from mail2.ac.hmc.edu (localhost [127.0.0.1]) by mail2.ac.hmc.edu (8.12.10/8.12.10) with ESMTP id i6JJra41012379 for ; Mon, 19 Jul 2004 12:53:36 -0700 Received: (from majordomo@localhost) by mail2.ac.hmc.edu (8.12.10/8.12.7/Submit) id i6JJraM3012374; Mon, 19 Jul 2004 12:53:36 -0700 Date: Mon, 19 Jul 2004 12:53:36 -0700 From: owner-idwg-l@hmc.edu Message-Id: <200407191953.i6JJraM3012374@mail2.ac.hmc.edu> X-Authentication-Warning: mail2.ac.hmc.edu: majordomo set sender to owner-idwg-l@mail2.ac.hmc.edu using -f To: idwg-l-approval@Mail.ac.hmc.edu Subject: BOUNCE idwg-l@mail2.ac.hmc.edu: Non-member submission from [Internet-Drafts@ietf.org] X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on turing X-Spam-Status: No, hits=0.3 required=7.5 tests=NO_REAL_NAME autolearn=no version=2.63 X-Spam-Level: MIME-Version: 1.0 >From idwg-l-manager Mon Jul 19 12:53:35 2004 Received: from psmtp.com (exprod7mx61.postini.com [12.158.38.111]) by mail2.ac.hmc.edu (8.12.10/8.12.10) with SMTP id i6JJrL41012281 for ; Mon, 19 Jul 2004 12:53:26 -0700 Received: from source ([132.151.1.176]) by exprod7mx61.postini.com ([12.158.38.251]) with SMTP; Mon, 19 Jul 2004 15:53:21 EDT Received: from CNRI.Reston.VA.US (localhost [127.0.0.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA19325; Mon, 19 Jul 2004 15:53:18 -0400 (EDT) Message-Id: <200407191953.PAA19325@ietf.org> Mime-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" To: i-d-announce@ietf.org Cc: idwg-l@hmc.edu From: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-ietf-idwg-idmef-xml-12.txt Date: Mon, 19 Jul 2004 15:53:18 -0400 Sender: dinaras@cnri.reston.va.us X-pstn-levels: (S:12.57835/99.55584 R:95.9108 P:95.9108 M:97.1795 C:83.1967 ) X-pstn-settings: 3 (1.0000:2.0000) s gt3 gt2 gt1 r p m C X-pstn-addresses: from [db-null] X-Spam-Status: No, hits=0.4 required=8.0 tests=MIME_BOUND_NEXTPART, NO_REAL_NAME autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on mail2.ac.hmc.edu --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Intrusion Detection Exchange Format Working Group of the IETF. Title : The Intrusion Detection Message Exchange Format Author(s) : D. Curry, et al. Filename : draft-ietf-idwg-idmef-xml-12.txt Pages : 167 Date : 2004-7-19 The purpose of the Intrusion Detection Message Exchange Format (IDMEF) is to define data formats and exchange procedures for sharing information of interest to intrusion detection and response systems, and to the management systems which may need to interact with them. This Internet-Draft describes a data model to represent information exported by intrusion detection systems, and explains the rationale for using this model. An implementation of the data model in the Extensible Markup Language (XML) is presented, an XML Document Type Definition is developed, and examples are provided. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-idwg-idmef-xml-12.txt To remove yourself from the I-D Announcement list, send a message to i-d-announce-request@ietf.org with the word unsubscribe in the body of the message. You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce to change your subscription settings. Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-ietf-idwg-idmef-xml-12.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-ietf-idwg-idmef-xml-12.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <2004-7-19152618.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-ietf-idwg-idmef-xml-12.txt --OtherAccess Content-Type: Message/External-body; name="draft-ietf-idwg-idmef-xml-12.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2004-7-19152618.I-D@ietf.org> --OtherAccess-- --NextPart-- --ReaqsoxgOBHFXBhH--