[KLUG Members] log watching

[Tony Gettig]

On May 16, 2005, at 7:40 PM, Adam Tauno Williams wrote:
...

> interested (and doesn't require installing the complete contents of  
> CPAN
> on my box).
>

No kidding! Installing swatch did take more than a few minutes of  
fetching things from cpan.

The idea of a log watcher is appealing to me, but it does seem like  
an uphill journey. At work, I like to tail -f certain log files on my  
home box. I seem to recall a post some time ago about using swatch  
(or something similar) to dynamically add an iptables rule to drop  
packets from an IP address, such as when an idiot is using an  
automated ssh attack. I get a lot of those.


Tony Gettig