From ea1a402c4a82738c31a3b2c8c8ada180513f9441 Mon Sep 17 00:00:00 2001
From: pharook <ph@rook.cz>
Date: Wed, 25 Jul 2012 17:13:10 +0200
Subject: [PATCH] Added tag examples.
---
src/warden-client/doc/README.cesnet | 7 ++++---
1 file changed, 4 insertions(+), 3 deletions(-)
diff --git a/src/warden-client/doc/README.cesnet b/src/warden-client/doc/README.cesnet
index 689cd9d..fb1f474 100644
--- a/src/warden-client/doc/README.cesnet
+++ b/src/warden-client/doc/README.cesnet
@@ -88,7 +88,8 @@ C. Description tags
1. Detection medium
- * Network - network data based (Snort, Suricata, Bro, FTAS, LaBrea, Kippo)
+ * Network - network data based (Snort, Suricata, Bro, FTAS, LaBrea, Kippo,
+ Dionaea)
* Host - host based (Swatch, Logcheck)
* Correlation - corellation engines (Prelude, OSSIM)
* External - credible external sources (incident reporting, ticket
@@ -97,7 +98,7 @@ C. Description tags
2. Data source
* Content - datagram content based detectors (Snort, Bro)
- * Flow - netflow based (FTAS, FlowMon)
+ * Flow - netflow based (FTAS, FlowMon, HoneyScan)
* Connection - connection data (portscan, portsweep)
* Data - application data based (SpamAssassin, antiviruses)
* Log - based on system logs, where more specific source is not
@@ -113,7 +114,7 @@ C. Description tags
4. Detector/analyzer product name examples
- * Snort, FTAS, SpamAssassin, LaBrea, Swatch, Prelude
+ * Snort, FTAS, SpamAssassin, LaBrea, Swatch, Prelude, Kippo, Dionaea
--------------------------------------------------------------------------------
D. Types of events
--
GitLab