Subject: [sip-clf] What to do with logs

From: Chris Lonvick <[email-masked]>
Date: Tue, 14 Sep 2010 14:25:12 -0700 (PDT)

Hi Folks,

I know that the working group is not going to define how logs are to be 
used, but I thought that it might be useful for people to see this.

For those of you who belong to Usenix, go here:
   http://www.usenix.org/publications/login/2010-08/index.html
and read the article on "Making Sense of Logs" by Ron Dilley.

For those of you who don't belong to Usenix, a previous and somewhat 
similar article may be found here:
   http://www.ranum.com/security/computer_security/code/
In the overwatch line, click on the "A paper" link.

Regards,
Chris