RE: Standardized Reporting

From: Russell Fulton (r.fulton@auckland.ac.nz)
Date: 08/16/02 

From: Russell Fulton <r.fulton@auckland.ac.nz>
To: "Brooke, O'neil (EXP)" <o'neil.brooke@lmco.com>
Date: 16 Aug 2002 10:37:20 +1200

On Fri, 2002-08-16 at 08:35, Brooke, O'neil (EXP) wrote:
> Hello,
>
> Since last night's post, I've received several responses both on and
> off list. Every single one of them was positive and/or supportive of the
> concept.

Well here's one that isn't ;-)

I like the list the way it is. If you try an formalise it I will stop
reporting stuff here. I am already quite busy enough looking after an
open network with 10,000 hosts in an educational institution. I spend a
lot of time monitoring since this is our best defense, given the open
nature of our network and so I see a lot of interesting stuff float by.
In New Zealand universities have a statutory obligation to serve the
community and I see passing observations to this list as one way I can
do it.

If you want posters to follow particular formats and meet particular
standards then you might find the posts dry up.

Beware of killing the goose! 

-- 
Russell Fulton, Computer and Network Security Officer
The University of Auckland,  New Zealand

"It aint necessarily so"  - Gershwin

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com