RE: Acqusition of time

["dave" <dave () netmedic net>]

Actually a good attorney could tear up any log system even with perfect time
stamps.  All that need would need to be proved was the fact that it could
have been faked.

 

Dave Kleiman
dave () netmedic net
www.netmedic.net

 


-----Original Message-----
From: firewall-wizards-admin () honor icsalabs com
[mailto:firewall-wizards-admin () honor icsalabs com] On Behalf Of Noonan,
Wesley
Sent: Wednesday, January 29, 2003 10:51
To: 'Brian Monkman'; firewall-wizards () honor icsalabs com
Subject: RE: [fw-wiz] Acqusition of time

Yes. Logging. I would suspect that any decent lawyer could tear apart logs
that had inconsistent time hashes in court.

Wes Noonan, MCSE/CCNA/CCDA/NNCSS/Security+
Senior QA Rep.
BMC Software, Inc.
(713) 918-2412
wnoonan () bmc com
http://www.bmc.com


> -----Original Message-----
> From: Brian Monkman [mailto:bmonkman () comcast net]
> Sent: Wednesday, January 29, 2003 08:56
> To: firewall-wizards () honor icsalabs com
> Subject: [fw-wiz] Acqusition of time
>
> Folks - I'm having a discussion with a few people and we have a
> question that we are interested in getting comments from the list on.
>
> Are there any situations where a firewall's acqusition of time
> could/should be from a network time source? Not necessarily a public
> source, it could be an "internal" time source.
>
> If there are situations where this makes sense, should these same
> firewalls have battery backed up clocks on board or would that be
> unnecessary?
>
> Brian
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () honor icsalabs com
> http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards



_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards