RE: [fw-wiz] Acqusition of time

From: dave (
Date: 01/29/03

From: "dave" <>
To: "'Noonan, Wesley'" <>, "'Brian Monkman'" <>, <>
Date: Wed Jan 29 11:09:16 2003

Actually a good attorney could tear up any log system even with perfect time
stamps. All that need would need to be proved was the fact that it could
have been faked.


Dave Kleiman


-----Original Message-----
[] On Behalf Of Noonan,
Sent: Wednesday, January 29, 2003 10:51
To: 'Brian Monkman';
Subject: RE: [fw-wiz] Acqusition of time

Yes. Logging. I would suspect that any decent lawyer could tear apart logs
that had inconsistent time hashes in court.

Wes Noonan, MCSE/CCNA/CCDA/NNCSS/Security+
Senior QA Rep.
BMC Software, Inc.
(713) 918-2412

> -----Original Message-----
> From: Brian Monkman []
> Sent: Wednesday, January 29, 2003 08:56
> To:
> Subject: [fw-wiz] Acqusition of time
> Folks - I'm having a discussion with a few people and we have a
> question that we are interested in getting comments from the list on.
> Are there any situations where a firewall's acqusition of time
> could/should be from a network time source? Not necessarily a public
> source, it could be an "internal" time source.
> If there are situations where this makes sense, should these same
> firewalls have battery backed up clocks on board or would that be
> unnecessary?
> Brian
> _______________________________________________
> firewall-wizards mailing list
firewall-wizards mailing list