[Oisf-users] removing unfied1 output

Victor Julien victor at inliniac.net
Wed Oct 19 08:51:50 EDT 2011


Anyone opposed to us removing the unified1 output? We're going to do
some refactoring of the output modules to fix bug #264. The lesser work
we need to do the better.

Unified2 + Baryard2 seems to be far superior to unified1 + barnyard
0.2.0, both in general and in the Suricata implementation. So I'm
thinking we should remove unified1.

The oisf-devel list was already pretty much unanimous, but wanted to
check with you users too :)

Objections? Opinions? +1's, -1's?

Cheers,
Victor

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------



More information about the Oisf-users mailing list