Forensic logging based on device type
It would be useful to be able to optionally log on device type. This would make it possible to ignore classes of devices for which you don't have to save Forensic logs, to cut down on their volume.
For example, Evaluate DHCP options 43, 60 or 125 to classify devices as CM, eMTA or CPE. If option 125 contains docsisX:Y do not store forensic logs (device is a cable modem).