-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Tue, Jul 7, 2015 at 7:27 PM, David Serrano <tor@dserrano5.es> wrote:
Throwing this idea out there instead of keeping it to myself: what about
modifying the form to ask also for the destination port? So the investigator
would enter source IP, dest port and date. Can be somewhat confusing due to
the source/dest mix, but the "Exit" column in this case would be pretty clear
because it would refer only to the required port.


I actually quite like this idea, I think that could work.

Anyone else have an opinion on this?

Joshua Lee Tucker
@tuckerwales
-----BEGIN PGP SIGNATURE-----
Version: Mailvelope v0.13.1
Comment: https://www.mailvelope.com
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=jw3J
-----END PGP SIGNATURE-----


On Tue, Jul 7, 2015 at 7:27 PM, David Serrano <tor@dserrano5.es> wrote:
On 2015-07-07 15:19:18 (+0100), Joshua Lee Tucker wrote:
>
> On 7/7/15, teor <teor2345@gmail.com> wrote:
> > Organisation X experiences an attack on their website via an IP address
> >
> > Organisation X experiences a SSH login/password scan via an IP address
> >
> > We could split the Exit column in two (web ports, other ports)
>
> I personally don't like displaying the ports in the overview page - I
> would also much rather have this information displayed in a detail
> page. (Maybe make the "Exit: Yes" clickable?)

Throwing this idea out there instead of keeping it to myself: what about
modifying the form to ask also for the destination port? So the investigator
would enter source IP, dest port and date. Can be somewhat confusing due to
the source/dest mix, but the "Exit" column in this case would be pretty clear
because it would refer only to the required port.


--
 David Serrano
 PGP: 1BCC1A1F280A01F9

_______________________________________________
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays