On Sat, 8 Jun 2019, Kevin A. McGrail wrote:

On 6/8/2019 1:27 AM, Henrik K wrote:
On Fri, Jun 07, 2019 at 11:53:24AM -0700, John Hardin wrote:
...where we're not collapsing on solely the rule name, I'd accept that.
I guess this was the confusion then.  I've been talking about identical /
duplicate lines, as is the code.  Of course it won't collapse only on some
part of the line.  This same thing is a common default syslog feature, so I
thought it would be pretty clear.

Yes, I thought *immediately* of the syslog deduplication anti-flood
feature and thought it was good.

Agreed. I was only stressing the point for clarity because of the different contexts.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 [email protected]    FALaholic #11174     pgpk -a [email protected]
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Vista: because the audio experience is *far* more important than
  network throughput.
-----------------------------------------------------------------------
 2 days until the 52nd anniversary of Israel's victory in the Six-Day War

Reply via email to