Changing Log Entries from Prosecution Expert Witness

Comments in the newest blog put forward supposedly by Det Mark Lounsbury, Norwich PD, include items that he says were in the firewall log.  But a commenter called him out (rudely, mind you) about inconsistencies in the firewall log entries so he changed them!!

Well part of the magic of the internet, is it's difficult to tell when changes have been made to a blog posting, unless the author uses good form to point it out.  I've got a historical copy of the site and used a handy tool to let you see the differences in the firewall logs from January 30th post (L), to the Feb 2nd (R) revision:

L1 Oct 19 10:39:18.250 cofirewall httpd[282]: 121 Statistics: duration=4.51 id=WDPwC sent=497 rcvd=26500 srcif=Vpn6 src=10.2.19.252/3629 dstif=Vpn5 dst=38.113.198.192/80 op=GET arg=http://www.orgasm-mystery.com/oral-sex-technique.htm result="200 OK" proto=http rule=2
R1 Oct 19 10:39:18.250 cofirewall httpd[282]: 121 Statistics: duration=4.51 id=WDPwC sent=497 rcvd=26500 srcif=Vpn6 src=10.2.19.252/3629 dstif=Vpn5 dst=38.113.198.192/80 op=GET arg=http://www.orgasm-mystery.com/oral-sex-technique.htm result="200 OK" proto=http rule=2
L3 Oct 19 10:39:22.033 cofirewall httpd[77]: 121 Statistics: duration=0.16 iDPyr sent=337 rcvd=25233 srcif=Vpn6 src=10.2.19.252/3668 dstif=Vpn5 dstd=WDNMH sent=416 rcvd=144 srcif=Vpn6 src=10.2.19.252/3666 dstif=Vpn5

dst=38.113.198.192/80 op=GET arg=http://www.orgasm-mystery.com/images/eb3_42.gif result="304 Not Modified" proto=http rule 594
R3 Oct 19 10:39:22.033 cofirewall httpd[77]: 121 Statistics: duration=0.16 id=WDNMH sent=416 rcvd=144 srcif=Vpn6 src=10.2.19.252/3666 dstif=Vpn5 dst=38.113.198.192/80 op=GET arg=http://www.orgasm-mystery.com/images/eb3_42.gif result="304 Not Modified" proto=http rule=2
L5=R5 Oct 19 10:39:52.594 cofirewall httpd[282]: 121 Statistics: duration=0.55 id=WDPyr sent=337 rcvd=25233 srcif=Vpn6 src=10.2.19.252/3668 dstif=Vpn5 dst=66.28.207.155/80 op=GET arg=http://www.cheatinglesbians.com/t2/pps=mystery/tour1.htm result="200 OK" proto=http rule=2

Posted by Mike Conwell at 2/2/2009 7:34 PM
Categories: Legal
 
Comments
  • No comments exist for this entry.