[Logwatch] IP Summary

John lostguy74 at gmail.com
Tue Sep 6 10:32:59 MST 2005


Is it possible to have logwatch generate a summary by IP instead of by 
username. It would look something like this
 Failed logins from these:
aaa.aaa.aaa.aaa 10 times
bbb.bbb.bbb.bbb 79 times
  Instead of this
 
Failed logins from these:
123/password from aaa.aaa.aaa.aaa: 1 Time(s)
123456/password from aaa.aaa.aaa.aaa: 1 Time(s)
JCPU/password from bbb.bbb.bbb.bbb: 1 Time(s)
NSCD/password from bbb.bbb.bbb.bbb: 1 Time(s)
PCPU/password from bbb.bbb.bbb.bbb: 1 Time(s)
TTY/password from bbb.bbb.bbb.bbb: 1 Time(s)
X11/password from bbb.bbb.bbb.bbb: 1 Time(s)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www2.list.logwatch.org/pipermail/logwatch/attachments/20050906/1e567697/attachment.htm


More information about the Logwatch mailing list