Re[2]: [logs] reinventing syslog [was: Secure Central Log Host]

Previous message: Tom Perrine: "Re: [logs] SDSC Secure Syslog"
In reply to: Tom Perrine: "Re: [logs] reinventing syslog [was: Secure Central Log Host]"
Next in thread: Ogle Ron (Rennes): "RE: [logs] reinventing syslog [was: Secure Central Log Host]"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

rweltyat_private

On Thu, 5 Dec 2002 13:35:30 -0800 Tom Perrine <tepat_private> wrote:
> I think I'd really like to have both timestamps in the final
> destination log file.  The one the client put on, AND the one put on
> by the final "write-to-file" daemone.

> Does this make sense, or an I just being overly {pedantic, paranoid,
> feature-crazy}?

no, you really need both. if things are out of sync, having both gives you
a chance to attempt reconstruction. with one or the other, you're just plain
SOL.

richard
--
Richard Welty                                         rweltyat_private
Averill Park Networking                                         518-573-7592
              Unix, Linux, IP Network Engineering, Security

_______________________________________________
LogAnalysis mailing list
LogAnalysisat_private
http://lists.shmoo.com/mailman/listinfo/loganalysis