RE: [logs] why log transport is still important

From: Anton A. Chuvakin (antonat_private)
Date: Mon Dec 16 2002 - 06:45:41 PST

  • Next message: Eric Fitzgerald: "RE: [logs] auditing"

    >>number that answers the most basic question, which is "what happened?",
    >>if you prefer "what event or type of event is this?".
    >Isn't this what a CVE CAN number is all about?
    What about all those things that don't have (and never will) a CVE/CAN,
    but are still important? Daemon crashes, out of memory errors, hardware
    errors, etc?
    
    Maybe CIEL will help...
    
    Best,
    -- 
      Anton A. Chuvakin, Ph.D., GCIA
         http://www.chuvakin.org
       http://www.info-secure.org
    
    
    _______________________________________________
    LogAnalysis mailing list
    LogAnalysisat_private
    http://lists.shmoo.com/mailman/listinfo/loganalysis
    



    This archive was generated by hypermail 2b30 : Wed Dec 18 2002 - 18:41:47 PST