Which two statements are true about packet logging in NetScreen IDP? (Choose two.)

A.
Packet logging on an Any/Any rule is not recommended due to performance impact.

B.
Logging all packets before and after the attack can have a performance impact.

C.
Packet logging records all packets flowing through the IDP.

D.
Packets can be logged only after an attack is matched.