Dear all,
We are please ton announce IDMEFv2 V09 Draft.
https://datatracker.ietf.org/doc/draft-lehmann-idmefv2
Several modifications of varying scales, based on lessons learned from our pilot projects as well as from other European projects utilizing IDMEFv2.
Please find bellow the list of the main differences:
- New incident type: Hazards
- New incident status: Obsolete
- New incident priority: Critical
- Two new signature attributes: SignedAttributes and Signature (details in draft appendix)
- New “Locator” attribute for ephemeral environment for Source, Target, Analyzer and Sensor. (details in draft appendix)
- New Sensor Data attribute (same enum as Anaylzer Data)
- New Polygon and Circle attribut in Target to define a targeted area ( Common Alert Protocol compatibility)
- Two appendix A and B describing ephemeral env and signature (those are proposal that need to be validated before possible inclusion inside the draft)
- Reworking of alert category enums
- with few new categories to deal with abnomaly and availabbility incidents. ( Abnomaly.* and Availability.*).
- Availability categories have been added for specific availability messages like: status, recovery, start, restart, etc.
- Examples have been added for each category definition
Review and comments on signature and ephemeral appendix are welcome.
Keep testing and exprimenting!
IDMEFv2 Task Force