ossec/ossec-hids — pull request #2 by jrossi (2014-01-25 18:33:56+00:00)
Title: ZeroMQ Json Output 

# DON'T ACCEPT LEAVE IN Pull Requests. ##

This is a complete patch that will allow the outputing of all alerts
to a zeromq PUB socket in JSON format.

New Config:

yes|no
tcp://localhost:11111

Somethings had to change to allow this to work. Based on the
preprossor defines
- WINDOWS was redefined by OSSEC and is used by GCC changed
the define to to DECODER_WINDOWS
- __name was redefinied by OSSEC and is used by GCC changed
the defeine to be __ossec_name