On Apr 25, 2018, at 9:36 AM, Dave O'Reilly <[email protected]> wrote: > OK, and what are the disadvantages of logging source port? Specifically, what > are the differential disadvantages between logging IP address and source port > versus only logging IP address?
I don't think there are times when it makes sense to log IP source address but does not make sense to log source port, at least for IPv4. For IPv6, you could log /64 prefix and that would get you more information than logging /32 IP address+port does in IPv4.
_______________________________________________ Int-area mailing list [email protected] https://www.ietf.org/mailman/listinfo/int-area
