Sorry, I may have misread your email. Are you saying that there are times when it makes sense to log IP, but NO times in which it makes sense to log source port? Or something different?
daveor > On 25 Apr 2018, at 14:39, Ted Lemon <mel...@fugue.com> wrote: > > On Apr 25, 2018, at 9:36 AM, Dave O'Reilly <r...@daveor.com> wrote: >> OK, and what are the disadvantages of logging source port? Specifically, >> what are the differential disadvantages between logging IP address and >> source port versus only logging IP address? > > I don't think there are times when it makes sense to log IP source address > but does not make sense to log source port, at least for IPv4. For IPv6, > you could log /64 prefix and that would get you more information than logging > /32 IP address+port does in IPv4. > _______________________________________________ Int-area mailing list Int-area@ietf.org https://www.ietf.org/mailman/listinfo/int-area
