Time stamp for Recent
Kevin Appel
kappel at clunet.edu
Thu Jul 21 17:45:05 CEST 2005
Hello everyone,
I am using the recent module to set up a rule to block too many ssh attempts and I am curious about the last_seen number. Is this some sort of timestamp and if it is, is it possible to translate this to a readable format?
Example:
[root at caddy net]# cat /proc/net/ipt_recent/sshscans
src=192.168.1.21 ttl: 64 last_seen: 6908449 oldest_pkt: 5 last_pkts: 6866823, 6867384, 6867634, 6908149, 6908449
Thank you,
Kevin
More information about the netfilter
mailing list