From 6ad55f64b3868c5810e684b6dd9a0a31cb03dcb6 Mon Sep 17 00:00:00 2001 From: Yaroslav Halchenko Date: Tue, 31 Jul 2012 15:43:13 -0400 Subject: [PATCH] ENH: add wu-ftpd failregex for use against syslog (Closes: #514239) --- config/filter.d/wuftpd.conf | 1 + testcases/files/logs/wu-ftpd | 2 ++ 2 files changed, 3 insertions(+) create mode 100644 testcases/files/logs/wu-ftpd diff --git a/config/filter.d/wuftpd.conf b/config/filter.d/wuftpd.conf index 56ba499f0..6f266fb5a 100644 --- a/config/filter.d/wuftpd.conf +++ b/config/filter.d/wuftpd.conf @@ -12,6 +12,7 @@ # Values: TEXT # failregex = wu-ftpd(?:\[\d+\])?:\s+\(pam_unix\)\s+authentication failure.* rhost=$ + wu-ftpd(?:\[\d+\])?: *failed login from .*\[\] *$ # Option: ignoreregex # Notes.: regex to ignore. If this regex matches, the line is ignored. diff --git a/testcases/files/logs/wu-ftpd b/testcases/files/logs/wu-ftpd new file mode 100644 index 000000000..b6b416135 --- /dev/null +++ b/testcases/files/logs/wu-ftpd @@ -0,0 +1,2 @@ +# This login line is from syslog +Oct 6 09:59:26 myserver wu-ftpd[18760]: failed login from hj-145-173-a8.bta.net.cn [202.108.145.173]