| The Spooler provides secure communication with an external host. It interfaces with the Manager and Event Analyzer through pipes. In the IDS implementation, it lowers its execution authority and limits the directories which it can access. In the IDS implementation, the Spooler connects to an external host over a network, and if that is not available, writes Analysis Record data to files. When the network connection is restored, it sends the data in the saved files, as well as any new records. |