> That would be
> 
> %src-ip:ipv4%/%src-port:number% to %outside:%dst-ip:ipv4%/%dst-port:number%
> 
> The idea is not that it is an IP field, but the field (name) should be quite
> specific.

        Oh wait... So in the %src-ip:ipv4% ,  the "src-ip" portion is
just what the rule base "names" the field?  Ie - it could easily be: 

%nifty:%ipv4% .... now "nifty" is the "field name" for the "ip address"?

-- 
        Champ Clark III | Softwink, Inc | 800-538-9357 x 101
                     http://www.softwink.com

GPG Key ID: 58A2A58F
Key fingerprint = 7734 2A1C 007D 581E BDF7  6AD5 0F1F 655F 58A2 A58F
If it wasn't for C, we'd be using BASI, PASAL and OBOL.

Attachment: pgpbD4KiESTOX.pgp
Description: PGP signature

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com

Reply via email to