On Wed, Feb 9, 2011 at 10:28 AM, Nick Gearls <[email protected]> wrote:
> Hello,
>
> When an attack (timeout) is detected, it is logged at the info level.
> Shouldn't this be considered as a warning?

Counters would be nice for this since you want to know something about
the big picture before worrying about it.

Really, it would be great to have a general framework for maintaining
counters of different types of events, for consumption by various
sorts of modules.  (SNMP,, server-status display, logging current
values at intervals, alerting when certain counters are increasing too
quickly, etc.).

Reply via email to