Time stamp for Recent

Kevin Appel kappel at clunet.edu
Thu Jul 21 17:45:05 CEST 2005


Hello everyone,

I am using the recent module to set up a rule to block too many ssh attempts and I am curious about the last_seen number.  Is this some sort of timestamp and if it is, is it possible to translate this to a readable format?

Example:
[root at caddy net]# cat /proc/net/ipt_recent/sshscans 
src=192.168.1.21 ttl: 64 last_seen: 6908449 oldest_pkt: 5 last_pkts: 6866823, 6867384, 6867634, 6908149, 6908449

Thank you,

Kevin





More information about the netfilter mailing list