All sessions (when available) are logged for the purposes of system administration, bug tracking, usage statistics and to trace misuse. In the case of misuse, relevant information may be passed to security teams at other sites as part of an investigation. Otherwise the information is not passed to any third party except as required by law.
As a matter of course, the following data is logged (when available): user name, physical location of calling machine (defined as either an institution, or as a physical wireless access point), time of session, connections made (includes destination address, port number, protocol, time and duration). Lapwing logs are kept for 3 months, then deleted, although detailed traffic logs may be deleted after approximately 1 month. Certain information is extracted from logs to be processed for usage statistics and trend analysis and may be held indefinitely.
Last updated 11 January 2013