>Here's my list:
> N should be considered a settable parameter
Oh, my - you surely missed something, Marcus. Where is all the:
- Bottom N Accesed Ports
- Bottom N Event Types
- Bottom N ...
Event rarity rules!
Best,
--
Anton A. Chuvakin, Ph.D., GCIA, GCIH
http://www.info-secure.org
http://www.securitywarrior.com
_______________________________________________
LogAnalysis mailing list
LogAnalysis@private
http://lists.shmoo.com/mailman/listinfo/loganalysis
This archive was generated by hypermail 2.1.3 : Thu Aug 19 2004 - 22:08:10 PDT