Re: Question about logging

["Curq" <curq () flashmail com>]

I think he was getting at the exposure of the syslog server once a honeypot
is compromised.

To follow your example:
In this case you have to leave the address of the dead man's switch in your
pocket and give the mobsters an opportunity (though limited) to visit them
next.

curq

----- Original Message -----
From: <Valdis.Kletnieks () vt edu>
To: "TJ O'Grady" <tjogrady () flyingwithouta net>
Cc: <honeypots () securityfocus com>
Sent: Thursday, December 05, 2002 10:17 PM
Subject: Re: Question about logging