From 14edeed310ea5d74a13ec72d415b934cb4f7beb1 Mon Sep 17 00:00:00 2001 From: "Sergey G. Brester" Date: Sat, 3 Apr 2021 23:24:55 +0200 Subject: [PATCH] fixed regex (don't need to match whole line, e. g. every port etc) --- config/filter.d/scanlogd.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/filter.d/scanlogd.conf b/config/filter.d/scanlogd.conf index 65ad63f6..15fea329 100644 --- a/config/filter.d/scanlogd.conf +++ b/config/filter.d/scanlogd.conf @@ -10,7 +10,7 @@ before = common.conf _daemon = scanlogd -failregex = ^%(__prefix_line)s\ to\ [\.:0-9a-f]+\ ports\ [\ \.,0-9]+,\ f.......,\ TOS\ [0-9]+,\ TTL\ [0-9]+\ \@[0-9]{1,2}:[0-9]{2}:[0-9]{2}$ +failregex = ^%(__prefix_line)s(?::) to \S+ ports\b ignoreregex =