Re: session logging IDS

[Stefan Keller <stefan.keller () gmail com>]

Hi, 

for high-level session overview information older software like ARGUS
would work, too.
As for the size of the hard drive, that would depend on the volume of
traffic that is actually monitored and the frequency of the reviews.
If you rotate logs and automatically delete the old ones...
All in all, the "log all" approach seems very ambitious, esp. as IDS
has a reputation as a dust-collector in many companies. - Will you
have staff monitoring the IDS 24/7? With periodic reporting from them?

Regards

Stefan