Syslog-Sign: Minuses

• Online analysis more complex and expensive

  • Clearly possible

• May require change to how messages are routed to collectors

  • (to keep signature groups together)

• Requires some available memory on sending device

Previous slide

Next slide

Back to first slide

View graphic version