> Some sites will want to know about every conceivable event. > Some sites will run high-profile services which will get probed so > often that logging such probes would be a waste of cheap disk space. I'm not familiar with state-of-the-art in audit, but I'd assumed that all auditing systems allowed administrator control over such things. Hilarie