rfc-4767

The Intrusion Detection Exchange Protocol (IDXP)

B. Feinstein, G. Matthews
date2007-03 streamIETF areasec wgidwg statusEXPERIMENTAL pages28 canonicalhttps://www.rfc-editor.org/rfc/rfc4767 doi10.17487/RFC4767
This memo describes the Intrusion Detection Exchange Protocol (IDXP), an application-level protocol for exchanging data between intrusion detection entities. IDXP supports mutual-authentication, integrity, and confidentiality over a connection-oriented protocol. The protocol provides for the exchange of IDMEF messages, unstructured text, and binary data. The IDMEF message elements are described in RFC 4765, "The Intrusion Detection Message Exchange Format (IDMEF)", a companion document of the Intrusion Detection Exchange Format Working Group (IDWG) of the IETF. This memo defines an Experimental Protocol for the Internet community.