attachment-0001
Hi Joe and Mike,<br><br>Nope - the clock could have been manually or automatically<br>changed (e.g., to correct for drift while off the Internet) without<br>reconfiguring the NAC TimeSource value.<br><br>And calling that a ConfigChanged event is stretching and pretty<br>
obscure, IMHO.<br><br>Cheers,<br>- Ira<br><br clear="all">Ira McDonald (Musician / Software Architect)<br>Chair - Linux Foundation Open Printing WG<br>Secretary - IEEE-ISTO Printer Working Group<br>Co-Chair - IEEE-ISTO PWG IPP WG<br>
Co-Chair - TCG Trusted Mobility Solutions WG<br>Chair - TCG Embedded Systems Hardcopy SG<br>IETF Designated Expert - IPP & Printer MIB<br>Blue Roof Music/High North Inc<br><a style="color:rgb(51,51,255)" href="http://sites.google.com/site/blueroofmusic" target="_blank">http://sites.google.com/site/blueroofmusic</a><br>
<a style="color:rgb(102,0,204)" href="http://sites.google.com/site/highnorthinc" target="_blank">http://sites.google.com/site/highnorthinc</a><br>mailto:<a href="mailto:blueroofmusic@gmail.com" target="_blank">blueroofmusic@gmail.com</a><br>
Winter 579 Park Place Saline, MI 48176 734-944-0094<br>Summer PO Box 221 Grand Marais, MI 49839 906-494-2434<div style="display:inline"></div><div style="display:inline"></div><div style="display:inline"></div><div>
</div><div></div><div></div><div></div><br>
<br><br><div class="gmail_quote">On Mon, Dec 19, 2011 at 6:36 PM, Murdock, Joe <span dir="ltr"><<a href="mailto:jmurdock@sharplabs.com">jmurdock@sharplabs.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div link="blue" vlink="purple" lang="EN-US"><div><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">I think this message would have triggered off of a change in the TimeSource NAC attribute to indicate that someone reconfigured the time source used for security and encryption<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><div><div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> <a href="mailto:ids-bounces@pwg.org" target="_blank">ids-bounces@pwg.org</a> [mailto:<a href="mailto:ids-bounces@pwg.org" target="_blank">ids-bounces@pwg.org</a>] <b>On Behalf Of </b>Michael Sweet<br>
<b>Sent:</b> Monday, December 19, 2011 3:27 PM<br><b>To:</b> IDS Work Group<br><b>Subject:</b> [IDS] What to use for "system clock was changed" event?<u></u><u></u></span></p></div></div><div><div class="h5"><p class="MsoNormal">
<u></u> <u></u></p><p class="MsoNormal">All,<u></u><u></u></p><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">As I was going through the last of the IDS Log changes I need, I noticed in my notes that someone asked for an example of a time-change message (i.e. system clock was changed), but we don't have something for this in IDS Model.<u></u><u></u></p>
</div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">Thoughts?<u></u><u></u></p></div><div><p class="MsoNormal"><u></u> <u></u></p><div><div><div><div><div><p class="MsoNormal"><span style="font-size:13.5pt;font-family:"Monaco","serif";color:black">________________________________________________________________________<u></u><u></u></span></p>
</div><div><p class="MsoNormal"><span style="font-size:13.5pt;font-family:"Monaco","serif";color:black">Michael Sweet, Senior Printing System Engineer, PWG Chair<u></u><u></u></span></p></div></div></div>
</div></div><p class="MsoNormal"><u></u> <u></u></p></div><p class="MsoNormal"><br>-- <br>This message has been scanned for viruses and <br>dangerous content by <a href="http://www.mailscanner.info/" target="_blank"><b>MailScanner</b></a>, and is <br>
believed to be clean. <u></u><u></u></p></div></div></div><div><div class="h5"><br>--
<br>This message has been scanned for viruses and
<br>dangerous content by
<a href="http://www.mailscanner.info/" target="_blank"><b>MailScanner</b></a>, and is
<br>believed to be clean.
</div></div></div>
<br>_______________________________________________<br>
ids mailing list<br>
<a href="mailto:ids@pwg.org">ids@pwg.org</a><br>
<a href="https://www.pwg.org/mailman/listinfo/ids" target="_blank">https://www.pwg.org/mailman/listinfo/ids</a><br>
<br></blockquote></div><br><div style id="avg_ls_inline_popup"></div>
<br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br />believed to be clean.