Re: some suggestions on log analysis

[Matteo Cavalleri <shiva_(_dot_)_brahma_(_at_)_inwind_(_dot_)_it>]

> I find SWATCH to my liking. 
> ftp://ftp.stanford.edu/general/security-tools/swatch/

thanks i'll try it.

> As for not knowing what messages to expect, configure it to filter the
> messages that You know are uninteresting, and to send an alert on 

that's an excellent idea :)

-- 

    Shiva

  "Better true to yourself
Than a perfect shadow
       Of somebody else
     An empty shell"

(MrBig, My new religion)