--On Wednesday, October 12, 2005 2:21 PM -0700 Brian Gaynor
<briang@xxxxxxxxxxx> wrote:
If you're interested you could search your logfiles for the offending IP
to see what they were up to. The actual Logwatch scripts are
in /etc/log.d/scripts/. Have a look at them if you are interested in
seeing what Logwatch is looking for.
Just a heads-up that in Logwatch-7 (now in beta) the scripts will move out
of /etc to /usr/share/logwatch to be more FHS-compliant. Input is being
solicited on how to best structure this to accomodate user customizations.
Check the logwatch-devel mailing list for more info.