Subject: AW: Cisco, ISS, Sourcefire agree to alert standard.

From: "Liesen, Detmar (LDS)" <[email-masked]>
Date: Fri, 12 Mar 2004 15:11:24 +0100

Maybe the File does not come to all requestors because R3:FIL3 (3=E due to
virus-scanners) is the signature of a known email-virus????

Very bad choice for a request subject.
;)

Cheers,
Detmar

-----Ursprungliche Nachricht-----
Von: Fyodor [mailto:[email-masked]]
Gesendet: Freitag, 12. Marz 2004 03:06
An: Gene Jarboe
Cc: [email-masked]; 'Yoann Vandoorselaere'; 'Herve Debar'; 'Greg
Shipley'; 'intrusion detection wg'
Betreff: Re: Cisco, ISS, Sourcefire agree to alert standard.

Gene Jarboe <[email-masked]> spoke:
> Klee Michaelis,
> 
>       Why doesn't Cisco submit the SDEE Alert Specification to the IETF's 
> IDWG so that it will become
> a truly "open" international standard as opposed to a standard agreed upon 
> by so few organizations?

I would think the icsalab is behind the whole thing, and their SDEE spec is
one of their "marketting strategies". Their "Security vendor forum" and
membership requires at least 10k US to participate, which probably explains
alot.