Proposal & an RFC (nice to have)

Hello everybody,

I would like to make a proposal for the fast alerting formatting. At the
moment, we have something like this:

11/11/04-12:40:26.941428 {TCP} xxx.xxx.xxx.xxx:617 -> xxx.xxx.xxx.xxx:1016
[**] [1:653:9] SHELLCODE x86 unicode NOOP [**]
[Classification: Executable code was detected] [Priority: 1]

I would like to put the line where the priority is show to the top,
since if you use logsurfer, it is much easier to trigger actions
according to the priority. For me it would make sense, is there anybody
outthere who possibly disagree or even have good reasons not to do it
so?

Best regards,
Edin


-------------------------------------------------------
This SF.Net email is sponsored by:
Sybase ASE Linux Express Edition - download now for FREE
LinuxWorld Reader's Choice Award Winner for best database on Linux.
http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click