On Tuesday, August 16, 2011 05:56:41 AM Mr Dash Four wrote: > > - Extract obj from NETFILTER_PKT events > > Would this allow filtering with ausearch/aureport based on the obj value > (something which was impossible until now)? That is the intent. -Steve