diff --git a/plugins-available/packs b/plugins-available/packs
index 2fb7025..6132f3a 100644
--- a/plugins-available/packs
+++ b/plugins-available/packs
@@ -1,12 +1,18 @@
 #!/bin/sh
 
+# security upgrades
+# /usr/bin/apt-get -q -y --ignore-hold --allow-change-held-packages --allow-unauthenticated -s dist-upgrade | /bin/grep ^Inst | /bin/grep -i securi | /usr/bin/cut -d\  -f2 | /bin/wc -w
+
+# all upgrades
+# /usr/bin/apt-get -q -y --ignore-hold --allow-change-held-packages --allow-unauthenticated -s dist-upgrade | /bin/grep ^Inst | /usr/bin/cut -d\  -f2 | /bin/wc -w
+
 set -o noclobber
 
 me="packs"
 
-LINE=$("$APT" | "$AWK" -v myhost="$myhost" -v time=`date -u +%s%N`  '{if ($1~/^Inst/) counter=counter+1} END {if (counter) printf "packages,host=%s packs=%si %s\n",myhost,counter,time}')
+uppaks=$(/usr/bin/apt-get -q -y --ignore-hold --allow-change-held-packages --allow-unauthenticated -s dist-upgrade | /bin/grep ^Inst | /usr/bin/cut -d\  -f2 | /usr/bin/wc -w )
+secpaks=$(/usr/bin/apt-get -q -y --ignore-hold --allow-change-held-packages --allow-unauthenticated -s dist-upgrade | /bin/grep ^Inst | /bin/grep -i securi | /usr/bin/cut -d\  -f2 | /usr/bin/wc -w )
 
-if [ -n "${LINE##+([[:space:]])}" ]; then # <= FIXME! find a better way.
-	writeline "$LINE" "$MAXLINES" "$me"
-fi
+LINE="packages,host="$myhost" packs="$uppaks"i, security="$secpaks"i "$(/bin/date -u +%s%N)$'\n'
 
+writeline "$LINE" "$MAXLINES" "$me"