Bugtraq: Re: syslog idea

[fred () nasirc hq nasa gov (Fred Blonder)]

        From: "Jonathan M. Bresler" <jmb () kryten atinc com>

                On Fri, 7 Oct 1994, Fred Blonder wrote:

                At the FIRST Conference in Boston a couple months ago, Gene Spafford
                                                     ^^^^^^^^^^^^^^^^^^
        before the latest release of tripwire ;)

                . . . said he'd consider it in a future version.

        and he did!

Not exactly, the release was 'pending' at the time of the conference,
so I doubt that any major changes occurred between the time of the
conference and the latest release.

        take a look at the Changelog and at tw.conf.XXX files.  you can
        specify that tripwire should ignore changes in size, access
        time, modification time and signatures for log files.

Yes, but, that's not the same thing.  The point of checkpointing a
logfile would be to verify that the portion up to that last checkpoint
had not been tampered with, that is compute a digital signature for
part of the file.