Re: fail2ban vs. syslogd compression

On Thu, Aug 30, 2007 at 11:42:03AM +0200, Maxim Kammerer wrote:

> 1) Clarify if it is really true that the message "last message repeated \d+
> times" does not always refer to the last message, as suggested in one post.
> I thought that syslogd's raison d'etre was exactly to provide a unified
> tracking system for log messages, so it really should know where it's

The standard network protocol used to send log messages over the network is not reliable so as soon as you start processing logs on a remote host missing messages become a very real possibility.

-- 
"You grabbed my hand and we fell into it, like a daydream - or a fever."

-- To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org