On Sat, 8 Jun 2019, Kevin A. McGrail wrote:
On 6/8/2019 1:27 AM, Henrik K wrote:
On Fri, Jun 07, 2019 at 11:53:24AM -0700, John Hardin wrote:
...where we're not collapsing on solely the rule name, I'd accept that.
I guess this was the confusion then. I've been talking about identical /
duplicate lines, as is the code. Of course it won't collapse only on some
part of the line. This same thing is a common default syslog feature, so I
thought it would be pretty clear.
Yes, I thought *immediately* of the syslog deduplication anti-flood
feature and thought it was good.
Agreed. I was only stressing the point for clarity because of the
different contexts.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
[email protected] FALaholic #11174 pgpk -a [email protected]
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Vista: because the audio experience is *far* more important than
network throughput.
-----------------------------------------------------------------------
2 days until the 52nd anniversary of Israel's victory in the Six-Day War