From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: Auditing network traffic Date: Wed, 20 Jan 2016 10:18:29 -0500 Message-ID: <27424530.ASkzcua8kM@x2> References: Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com T24gV2VkbmVzZGF5LCBKYW51YXJ5IDIwLCAyMDE2IDA0OjI2OjM0IFBNIExldiBTdGlwYWtvdiB3 cm90ZToKPiBIZWxsbywKPiAKPiBJIHdvcmsgb24gYW4gYXVkaXNwIHBsdWdpbiB3aGljaCBhdWRp dHMgbmV0d29yayB0cmFmZmljIOKAkyB3aGF0IHByb2Nlc3MKPiBoYXMgc2VuZC9yZWNlaXZlZCBk YXRhIHRvL2Zyb20gd2hhdCByZW1vdGUgYWRkcmVzcy4gU28gZmFyIEkgc2VlIDIgd2F5cwo+IG9m IGFjY29tcGxpc2hpbmcgdGhhdDoKPiAKPiBIb29rIHN5c2NhbGxzLiBGaXJzdCwgaG9vayBzb2Nr ZXQgY2FsbCB3aXRoIGFmX2luZXQvaW5ldDYgdG8gZ2V0IHBpZCBhbmQKPiBmZCwgdGhlbiByZWFk L3dyaXRlL3NlbmR0by9yZWN2ZnJvbSBmaWx0ZXJlZCBieSBwaWQgYW5kIGZkLiBJIHNlZSBmZXcK PiBpc3N1ZXMgd2l0aCB0aGlzIGFwcG9hY2g6Cj4gCj4gMSkgRmQgY2FuIGJlIGNsb3NlZCBvciBk dXBlZCwgc28gSSBzaG91bGQgcHJvYmFibHkgaG9vayBjbG9zZS9kdXAyIGNhbGxzCj4gdG9vLgoK SXQgY2FuIGFsc28gYmUgcGFzc2VkIHRvIGFub3RoZXIgcHJvY2VzcyBieSBzZW5kbXNnLiBUaGUg cHJvY2VzcyBjYW4gCmZvcmsvY2xvbmUgY2hhbmdpbmcgdGhlIHBpZCBhbmQgdGhlbiB0aGUgY2hp bGQgYWNjZXNzIHRoZSBkZXNjcmlwdG9yLiBJdCBjYW4gCmFsc28gY2FsbCBzZW5kZmlsZSBhbmQg dGhlcmUgYXJlIG1vcmUgd3JpdGluZy9yZWFkaW5nIHN5c2NhbGxzLgoKCj4gTm90IHN1cmUsIHRo b3VnaCwgaWYgc29ja2V0IGNvdWxkIGJlIGNsb3NlZCBieSBrZXJuZWwgd2l0aG91dCBhbnkKPiBz eXNjYWxsLgoKZXhpdF9ncm91cAoKPiBBcyBhIHdvcmthcm91ZCwgb25lIGNhbiBqdXN0IGhvb2sg cmVhZC93cml0ZSBhbmQgY2hlY2sgaWYgZmQgaXMKPiBzb2NrZXQgKFNfSVNTT0NLKSBhbmQgYWxz byBzb21laG93IGZpbHRlciBvdXQgYWZfdW5peC4KCndoYXQgaWYgaXRzIG1tYXAnZWQ/CgoKPiAy KSBHZXR0aW5nIHNhZGRyL2RhZGRyLiBTZWVtcyB0aGF0IGRlc3QgYWRkciBjb3VsZCBiZSBvYnRh aW5lZCBmcm9tCj4gY29ubmVjdCBjYWxsLiBIb3dldmVyIEkgYW0gbm90IHN1cmUgd2hhdCBpcyB0 aGUgcmlnaHQgd2F5IHRvIGdldCB0aGF0IC0KPiBJIGdvdCB0d28gcmVjb3JkcywgZmlyc3QgU1lT Q0FMTCBhbmQgdGhlbiBTT0NLQUREUi4gRmlyc3Qgb25lIGhhcyBhbgo+IGFyZ3VtZW50IHdoaWNo IHBvaW50cyB0byBtZW1vcnkgbG9jYXRpb24gd2hlcmUgc29ja2FkZHIgc3RydWN0dXJlIGxheXMs Cj4gYW5kIHNlY29uZCBvbmUgaGFzIOKAnXNhZGRy4oCdIGZpZWxkLiAgTGF0dGVyIGxvb2tzIGdv b2QsIGJ1dCBkb2VzIFNPQ0tBRERSCj4gZXZlbnQgdHlwZSBhbHdheXMgZm9sbG93cyBTWVNDQUxM IGZvciBjb25uZWN0IGNhbGw/IFNhbWUgZm9yIHNlbmR0byBjYWxsLgoKWWVzLgogCj4gQW5vdGhl ciB3YXkgb2YgZ2V0dGluZyBuZXR3b3JrIHN0YXRzIGlzIHRoZSBBVURJVCB0YXJnZXQgZm9yIG5l dGZpbHRlci4KPiBMb29rcyBnb29kLCBubyBuZWVkIHRvIHdvcnJ5IGFib3V0IGZkcy9hZGRycy4g SG93ZXZlciB0aGVyZSBpcyBubyBwaWQuCgpJIGFtIHRoaW5raW5nIHRoYXQgd291bGQgYmUgYSBn b29kIGFkZGl0aW9uLiBIb3dldmVyLCB0aGVyZSBhcmUgdGltZXMgd2hlbiAKdGhlcmUgcmVhbGx5 IGlzIG5vIHBpZC4gRm9yIGV4YW1wbGUsIGl0IGNvdWxkIGJlIG1hc3F1ZXJhZGluZyBvciBkb2lu ZyBTTkFULgoKCj4gV2hhdCB3b3VsZCBiZSB0aGUg4oCdYmVzdOKAnSB3YXkgdG8gZ2V0IHBpZCBm b3IgdGhvc2UgcmVjb3Jkcz8gQW55dGhpbmcgZWxzZQo+IGJlc2lkZXMgbG9va2luZyBpbnRvIC9w cm9jL25ldC90Y3A/CgpUaGF0IG1pZ2h0IGJlIHRoZSBiZXN0IHdvcmthcm91bmQgcmlnaHQgbm93 LiBCdXQgYWRkaW5nIHRoZSBwaWQgc291bmRzIApyZWFzb25hYmxlIHRvIG1lLiBUaGlzIHdheSBp dCBjYW4gYmUgY29ycmVsYXRlZCB0byBvdGhlciBzeXN0ZW0gYWN0aXZpdHkuIEknZCAKaGF2ZSB0 byBhc2sgUGF1bCBvciBSaWNoYXJkIHRvIGNvbW1lbnQgb24gZmVhc2liaWxpdHkuCgotU3RldmUK Ci0tCkxpbnV4LWF1ZGl0IG1haWxpbmcgbGlzdApMaW51eC1hdWRpdEByZWRoYXQuY29tCmh0dHBz Oi8vd3d3LnJlZGhhdC5jb20vbWFpbG1hbi9saXN0aW5mby9saW51eC1hdWRpdA==