[AusNOG] Data Retention - are you kidding me??

[David Beveridge]

Pretty sure you're also meant to be keeping the source and destination tcp
ports as well which weren't there.

dave

On Tue, Nov 22, 2016 at 1:49 PM, <russell at central-data.net> wrote:

> Yes you are correct you should not be keeping record of the Subject line
> and i should have made it clear to strip it out when transporting the logs.
> Thanks for catching it though and ensuring people are clear on it
> Most systems will have the subject line in their standard logs and can
> simply be stripped out later \ not collected at all when sending over to
> data retention.
>
> Its a pretty fine line to collect all of the "relevant" data while not
> infringing on the privacy laws
>
>
> Kind Regards,
>
> Russell Brooks
>
>
> Central Data Systems Pty Ltd
> 88 Havelock Street, West Perth, WA 6005
> Phone: 08 9481 4010
>
> www.central-data.net
>
> ----- Original Message -----
> From: "Ross Wheeler" <ausnog at rossw.net>
> To: russell at central-data.net
> Cc: "ausnog" <ausnog at lists.ausnog.net>
> Sent: Tuesday, November 22, 2016 11:38:11 AM
> Subject: Re: [AusNOG] Data Retention - are you kidding me??
>
>
>
> > /^Subject:/      WARN
> > This will put a single line in your logs like the following
> > warning: header Subject: "Subject line"[src ip addr]; from=<
> src at address.com> to=<dst at address.com> proto=ESMTP helo=<src server>
>
> Is not the "Subject" header part of the "content of a mail message" and
> therefore explicitly NOT to be captured under the legislation?
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20161122/08aa9b70/attachment.html>