[wallfire-users] Needing help with $count filter option

[James L. <jl...@sl...>]

Hey all!

Here's what I'm trying to do:

wflogs -i netfilter -f '$start_time >= [00:00:00] && $count > 1' -o
html --sort=dport,-count --resolve=0 --whois=0  /var/log/kernel >
test.html

The above yields nothing at all :(  If I remove the $count > 1 then I
get all sorts of info...including a lot of things that have counts
above one.  Am I missing something?  Help!

James