Bugtraq mailing list archives
Re: syslog idea
From: grue () engin umich edu (Paul Howell)
Date: Mon, 10 Oct 94 21:52:25 EDT
Fred Blonder writes:
The limitation of Tripwire in this application is that log files are ALWAYS (well, almost) changing, so if Tripwire raised the alarm on a logfile, your reaction should be: "So what?". ;-)
I thought that tripwire would report if the log file got smaller, an indication that someone is removing records, yes? At least that seems like a reasonable thing to me. < Paul
Current thread:
- Re: Time for moderation?, (continued)
- Re: Time for moderation? Christopher Klaus (Oct 07)
- hmmm... Robert Matthew Barrie (Oct 08)
- Re: Time for moderation? James M Buggar (Oct 08)
- Re: Time for moderation? G.J.W. Hagenaars (Oct 08)
- 3 SMAIL BUGS Aleph One (Oct 07)
- Re: syslog idea Dror Matalon (Oct 07)
- OOOOOOOOOOOPsss..??? Stephen D. Williams (Oct 07)
- Re: OOOOOOOOOOOPsss..??? Bennett Todd (Oct 07)
- earlier posting of users' passwords and credit card numbers Dror Matalon (Oct 07)
- OOOOOOOOOOOPsss..??? Stephen D. Williams (Oct 07)
- Re: syslog idea *Hobbit* (Oct 07)
- Re: syslog idea Paul Howell (Oct 10)
- Re: syslog idea Howard the Energizer (Oct 10)