RSA Admin

November Update - "parse" attribute changes

Discussion created by RSA Admin Employee on Nov 8, 2010
Latest reply on Nov 10, 2010 by RSA Admin

Looking at several of the devices in the November content update, a lot of the changes on the devices we use/care about seem to be flipping the "parse" attribute in the UDS from 0 to 1. Per my weak understanding of UDS, this means that these messages definitions have previously existed, but were not being parsed. Can anyone confirm and, better yet, explain why this happens in the stock parsers?

 

An example of this is found in the Cisco PIX update <http://edelivery.rsasecurity.com/patches/rsa_env/content_updates/docs/Event%20Source%20Update/content/devices/diffs/2010_10/ciscopix_v20_detail_2010_10.htm>.

 

Thanks!

 

David

Outcomes