[ossec-dev] active response development

[John Ives <jives@xxxxxxxxxxxxxxxxxxxxx>]

I am looking for more information on writing my own active active response
scripts. Specifically, I would like to see examples of the data that is 
passed to the script, any perl example scripts, debugging information (eg 
does ossec have any functions for printing out what it did and if any 
messages where sent back in return), etc.  I have a couple active response 
script projects that I am considering and, if I can get them to work, I 
will be happy to share them with others.

Thanks,

John


-------------------------------------------------------------------------
John Ives                                           Phone (510) 642-7773
System & Network Security                            Cell (510) 229-8676
University of California, Berkeley
-------------------------------------------------------------------------