>>number that answers the most basic question, which is "what happened?",
>>if you prefer "what event or type of event is this?".
>Isn't this what a CVE CAN number is all about?
What about all those things that don't have (and never will) a CVE/CAN,
but are still important? Daemon crashes, out of memory errors, hardware
errors, etc?
Maybe CIEL will help...
Best,
--
Anton A. Chuvakin, Ph.D., GCIA
http://www.chuvakin.org
http://www.info-secure.org
_______________________________________________
LogAnalysis mailing list
LogAnalysisat_private
http://lists.shmoo.com/mailman/listinfo/loganalysis
This archive was generated by hypermail 2b30 : Wed Dec 18 2002 - 18:41:47 PST