Meanwhile…
Tcpdump logs are piling up
- We read through the logs with tcpdump and strings and a program called cleanup that Mark Fullmer wrote.
- This is tedious, icky, and prone to errors. Its hard to read terminal escape sequences and other obfuscated traffic.