From 977dfe4bd762474e4e2d077e258c49772a48f6f3 Mon Sep 17 00:00:00 2001
From: "Sergey G. Brester" <serg.brester@sebres.de>
Date: Sat, 3 Apr 2021 23:29:16 +0200
Subject: [PATCH] small amend: sport after saddr is optional

format of message: saddr[:sport] to daddr [and others,] ports port[, port...], ..., flags[, TOS TOS][, TTL TTL] @HH:MM:SS
---
 config/filter.d/scanlogd.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config/filter.d/scanlogd.conf b/config/filter.d/scanlogd.conf
index 15fea329..d3fe78b0 100644
--- a/config/filter.d/scanlogd.conf
+++ b/config/filter.d/scanlogd.conf
@@ -10,7 +10,7 @@ before = common.conf
 
 _daemon = scanlogd
 
-failregex =  ^%(__prefix_line)s<ADDR>(?::<F-PORT/>) to \S+ ports\b
+failregex =  ^%(__prefix_line)s<ADDR>(?::<F-PORT/>)? to \S+ ports\b
 
 ignoreregex =