Hi Brad, I know, hence my last sentence :-)
Later, Tony On Wed, 08 Jan 2003 08:42:33 EST Tony wrote: > Well, my thought is...why not just reboot to be sure. I mean, your LEAF box > is running out of RAM disk right? The disk is write protected isn't it? > Now, that doesn't mean that it can't happen again, so I would continue to > investigate but I would copy all relevant log files to a disk and reboot. The problem with that approach is that it a) erases the logs of the incident (unless you save offline copies first) and b) prevents all further forensic analysis. Granted, in some situations those aren't concerns of the firewall administrator. --Brad ------------------------------------------------------- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
