On Tuesday 27 May 2008 11:50:31 LC Bruzenak wrote:
> Is the host "0.0.0.0" field here a bug?

No, Eric's explanation sounds right.

> Once we aggregate these would be tough to separate.

That is why we added the node field. :)  You should probably enable it with 
the name_format option.

-Steve

--
Linux-audit mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/linux-audit

Reply via email to