FIRST STAGE My idea is to check auth.log file for it changes and create files based on it's source IP, for example, if there are login request from 192.168.0.1, so the system shall filter the log and create db.192.168.0.1; in this new filtered log file, it shall consist of the time and the destination port number. SECOND STAGE If the logs in certian file consist of correct sequence of port numbers (cronjob will do the checking and if all is correct, it will execute other shell command) Those are what I want to achieve, at least you can assist me in the first stage, if you can help me in second stage, it will be very nice of you. Thank you Regards
--------------------------------- Yahoo! FareChase - Search multiple travel sites in one click.