[Oisf-devel] removing unified1 output

Victor Julien victor at inliniac.net
Mon Oct 3 12:04:31 UTC 2011


Hey ppl, is anyone opposed to us removing the unified1 output? We're
going to do some refactoring of the output modules to fix bug #264. The
lesser work we need to do the better.

Unified2 + Baryard2 seems to be far superior to unified1+barnyard, both
in general and in the Suricata implementation. So I'm thinking we should
remove unified1.

Objections? Opinions? +1's, -1's?

Cheers,
Victor

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------




More information about the Oisf-devel mailing list