<html>
<font size=5 color="#0000FF"><b>Please REMOVE this address from your
mailing list.<br>
<br>
<br>
<br>
<br>
</font></b>At 09:12 PM 8/13/2006 -0400, you wrote:<br>
>On Sat, 12 Aug 2006, Gregory D Hough wrote:<br>
><br>
>> Tluggers,<br>
>><br>
>> Is anyone familiar with NetFilter's timestamps? This is what
they typically <br>
>> look like:<br>
>><br>
>> [root@localhost ~]# cat /proc/net/ipt_recent/ZW | grep
'69\.63\.21\.188'<br>
>> src=69.63.21.188 ttl: 32 last_seen: 2484808297 oldest_pkt: 1
last_pkts: <br>
>> 2484808297<br>
>><br>
>> And from the log I know the time it was last_seen three days
ago:<br>
>><br>
>> [root@localhost ~]# grep SYNYSTR-RESET /var/log/messages | grep
<br>
>> '69\.63\.21\.188'<br>
>> Aug 9 00:24:18 localhost kernel: SYNYSTR-RESET: IN=eth1
OUT= <br>
>> SRC=69.63.21.188 DST=192.168.1.251 LEN=64 TOS=0x00 PREC=0x00
TTL=32 ID=19088 <br>
>> DF PROTO=TCP SPT=2930 DPT=445 WINDOW=53760 RES=0x00 SYN
URGP=0<br>
>><br>
>> "Aug 9 00:24:18" && 2484808297 are true
somehow<br>
><br>
> In seconds since the epoch that date is:<br>
><br>
>$ date -d "Aug 9 00:24:18" +%s<br>
>1155097458<br>
><br>
> Get a second date and its equivalent to find the
relationship.<br>
><br>
>> I'm primarily interested in last_seen. I need a clean-up script
which <br>
>removes <br>
>> an IP's record after a certain period of inactivity and I don't
know how to <br>
>> work with that value. Naturally if I can get the current time in
the correct <br>
>> format I can work with that value. I suspect it is microseconds
since the <br>
>> module was (re)loaded.<br>
>><br>
>> How do I use date or time or whatever to read in the current
value of NOW in <br>
>> this format?<br>
><br>
> The date man page lists all the formatting
characters, e.g.:<br>
><br>
>now=$( date "+%b %d %H:%M:%S" )<br>
><br>
> The same format characters can also be used with
the dynamically<br>
> loadable bash built-in command strftime. See<br>
>
<<a href="http://www.unixreview.com/documents/s=10089/ur0606a/ur0606a.htm" eudora="autourl">http://www.unixreview.com/documents/s=10089/ur0606a/ur0606a.htm</a>>.<br>
><br>
>-- <br>
> Chris F.A.
Johnson
<<a href="http://cfaj.freeshell.org/" eudora="autourl">http://cfaj.freeshell.org</a>><br>
>
===================================================================<br>
> Author:<br>
> Shell Scripting Recipes: A Problem-Solution
Approach (2005, Apress)<br>
>--<br>
>The Toronto Linux Users Group.
Meetings:
<a href="http://tlug.ss.org/" eudora="autourl">http://tlug.ss.org</a><br>
>TLUG requests: Linux topics, No HTML, wrap text below 80
columns<br>
>How to UNSUBSCRIBE:
<a href="http://tlug.ss.org/subscribe.shtml" eudora="autourl">http://tlug.ss.org/subscribe.shtml</a><br>
<br>
</html>