Re: [psad-discuss] psad config csv and gnuplot

2016-07-23 Thread Michael Rash
; > *From:* Johannes Lavre [mailto:johann...@vfk.no] > *Sent:* 23. juli 2016 10:40 > *To:* psad-discuss@lists.sourceforge.net > *Subject:* [psad-discuss] psad config csv and gnuplot > > > > If i ignore local interface, networks or ports in psad main config file i > cannot u

[psad-discuss] psad config csv and gnuplot

2016-07-23 Thread Johannes Lavre
p.csv Psad -m local.log -O custom.conf -gnuplot -CSV-fields "timestamp dp:counthour" -gnuplot-file-prefix localdrop From: Johannes Lavre [mailto:johann...@vfk.no] Sent: 23. juli 2016 10:40 To: psad-discuss@lists.sourceforge.net Subject: [psad-discuss] psad config csv and gnuplot If i

[psad-discuss] psad config csv and gnuplot

2016-07-23 Thread Johannes Lavre
If i ignore local interface, networks or ports in psad main config file i cannot use psad in csv or gnuplot mode with local traffic in logs. I use psad for parsing csv files and graphing firewall logs. Example: Local.log contains only localtraffic grepped with cat /var/log/messages|grep DROP|g