Subj : Seen-by lines
To : Paul Hayton
From : mark lewis
Date : Sun Mar 31 2019 06:36 pm
On 2019 Apr 01 09:40:54, you wrote to me:
PH> This is not an area of expertise for me but I went looking for info on the
PH> fstc.org site and found this
that's the current base document, yes...
PH> [snip]
PH> There does not seem to be any reference to requiring that NET be displayed
PH> at the start of each SEEN-BY line
correct... there isn't in there... there's also no mention of the squashed
format where additional nodes in the same net and one the same line drop the
net/ part but we all know that it is done like that...
PH> - perhaps I should be looking at another reference doc?
i'm not sure which one that would be...
the thing i don't understand is it was working properly before so why did james
""fix"" it?? ;) ;) ;)
)\/(ark
Always Mount a Scratch Monkey
Do you manage your own servers? If you are not running an IDS/IPS yer doin' it
wrong...
... We are watching, and we are always here.
---
* Origin: (1:3634/12.73)
