RE: Initial Logging capabiltiies document

["patrick cain" <pcain@coopercain.com>]

George,

Thanks for the comments. I'll incorporate most of them into a new version.

But you say

"  
3.  Functional Capabilities of Log Storage Systems

gmj> I would argue that these are out of scope.
"

I disagree. Generation of a log message is nice, but there are many
instances where that message is lost to history because the receiving log
collector was down, broke, ignored, full, etc.  And never noticed or acted
upon. This is bad.

Since we are giving capabilities for "securing layer 2 and 3 devices", and
log storage is called out in the CURPRAC, it seemed to make sense that the
system engineer not forget that there are two parts of the logging problem.
Note that the three capabilities are only for "log storage" devices, which
should keep the router vendors happy.

Pat