> -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Champ Clark III [Softwink] > Sent: Thursday, December 02, 2010 5:33 PM > To: rsyslog-users > Subject: Re: [rsyslog] Fun with liblognorm / rsyslog > > > That would be > > > > %src-ip:ipv4%/%src-port:number% to %outside:%dst-ip:ipv4%/%dst- > port:number% > > > > The idea is not that it is an IP field, but the field (name) should > be quite > > specific. > > Oh wait... So in the %src-ip:ipv4% , the "src-ip" portion is > just what the rule base "names" the field? Ie - it could easily be: > > %nifty:%ipv4% .... now "nifty" is the "field name" for the "ip > address"?
jup > > -- > Champ Clark III | Softwink, Inc | 800-538-9357 x 101 > http://www.softwink.com > > GPG Key ID: 58A2A58F > Key fingerprint = 7734 2A1C 007D 581E BDF7 6AD5 0F1F 655F 58A2 A58F > If it wasn't for C, we'd be using BASI, PASAL and OBOL. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
