Sourcefire RNA Scanner Import Agent

Document created by tliu on Aug 8, 2009
Version 1Show Document
  • View in full screen mode

This document was generated from the following thread: Sourcefire RNA Scanner Import Agent by dfrye


Someone might find this useful - it is a quick little scanner connector that imports the Sourcefire RNA database (the eStreamer connector processes RNA events as IPS events). To run it you need to first generate these two reports as csv and save them with a .txt extension: * RNA Hosts report with RNA Hosts Workflow * RNA Services report with RNA Services Workflow If you use these workflows you should get the same column headings in the report and the parser should work. Then setup a scanner text file flexconnector and copy the files in. //dean