[Dshield] log submissions and egress traffic

Doug Douglass ddouglass at denverdata.com
Thu Oct 30 16:03:07 GMT 2003


> > 1) Are users including these private address spaces in dshield
> > submissions to get egress analysis?
>
> Not directly, but it comes post-NAT.
>

Assuming you're (capable) of logging post-NAT traffic. The appliances I have
(Linksys and SonicWall) log internal/pre-NAT traffic, though I could just
massage the addresses in my dshield submissions.




More information about the list mailing list