DESCRIPTION

  XML::IDMEF - A perl module for easily creating/parsing IDMEF messages

  IDMEF module is a wrapper around XML::DOM and XML::Parser, providing an 
  interface designed to simplify the parsing and creation of IDMEF messages. 
  IDMEF is an XML based standard for representing Intrusion Detection alert
  messages (http://www.silicondefense.com/idwg/).

  The interface provided by XML::IDMEF is designed to make it very simple
  to build an IDMEF message while parsing a log file with a key-value 
  structure, which is the most common situation when writing a log export
  module for a given software.


  ******* WARNING ******* WARNING ******* WARNING ******* WARNING *******

   This release (>0.11) introduces major internal changes compared
   with the previous versions. Furthermore, it implements the most
   *final* version of IDMEF. 

   You'd hence better check that using this version of the module
   does not break anything in your code (it should not, but, well...
   you know...)

   And of course: this is a beta release and has not been thoroughly
   tested. Please try it out if you can and report success/failure to
   the author (erwan@cpan.org).

   Use in production systems is at your own risks.

  ******* WARNING ******* WARNING ******* WARNING ******* WARNING *******


PREREQUISITES

  Requires XML::DOM and a XML::Parser.


BUILDING/INSTALLING

  Once the archive is unpacked, use these commands:

      perl Makefile.PL
      make
      make test
      make install

  If for some reason, you can't run these commands, you can simple copy 
  the IDMEF.pm file to your lib/XML directory. To find out which paths
  perl uses to locate modules, do 
  'perl -e "print join(\"\n\", @INC), \"\n\";"'


STATUS

  This version is a beta release, and has not yet been thoroughly
  tested in production environment. It has been succesfully run on both
  linux and openbsd. 
  If you encounter any problems installing or running this release, please
  email the author and provide him as much information as possible on the
  bug and its context.

  Please send any feedback to the author: erwan@cpan.org


NEW IN THIS RELEASE

  The IDMEF DTD is compliant with the IDMEF rfc draft 12. 
  Improved test sequences.
  See 'Changes' for a detailed historic.

BUGS
  
  XML::IDMEF uses internally a simplified version of the IDMEF DTD, which makes
  that this module will fail to create some very specific IDMEF messages. 
  In particular, recursive File tags are not accepted.


COPYRIGHT

  Copyright 2002 Erwan Lemonnier.

  This module is free software under BSD license.