[Logwatch] iptables summary on Ubuntu

Hugo van der Kooij hvdkooij at vanderkooij.org
Sun Jan 21 11:28:20 MST 2007

On Sun, 21 Jan 2007, Dale Morin wrote:


> The difference is the [52899815.060000] in the Ubuntu/Debian record.
> Since it is a timestamp, it prevents logwatch from summarizing the number
> of logged packets by IP.  This makes the kernel section of the logwatch
> report much larger than it needs to be.

How about doing it the other way around? Check the iptables config to drop 
the extra timestamp and you have no need to change logwatch files.

As I have not seen the request before one can argue it is something rather 
specific to your config of your iptables setup.


 	hvdkooij at vanderkooij.org	http://hvdkooij.xs4all.nl/
 	    This message is using 100% recycled electrons.

More information about the Logwatch mailing list