sebres
bd1eb70c52
speedup template first time selection through pre-sorted template list by template hits
8 years ago
sebres
0bed91b3c2
speedup SeekToTime test cases using exact date pattern...
8 years ago
sebres
e735f8f568
default non-unicode and case-sensitive matching (by pattern templates automatically add `(?iu)` for "ignore case" and "unicode" if expected)
8 years ago
sebres
ab0ac2111c
added possibility to specify more precise default date pattern:
...
- `datepattern = {^LN-BEG}` - only line-begin anchored default patterns
(matches date only at begin of line, or with max distance up to 2 non-alphanumeric characters from line-begin);
- `datepattern = {*WD-BEG}` - only word-begin anchored default patterns;
- `datepattern = ^prefix{DATE}suffix` - exact specified default patterns (using prefix and suffix);
common filter configs gets a more precise, line-begin anchored (datepattern = {^LN-BEG}) resp. custom anchoring default date-patterns;
8 years ago
sebres
f56ff5f48b
optimized to better usage of the last time template (parse part of line at the same place as last time, if enclosed in the same boundaries)
...
thereby follow rule "shortest distance to datetime should win", so possible collision causes search though all templates;
speedup it a little bit (not possible collision if distance <= 1 or if line-begin anchoring, so break search if such template found)
8 years ago
sebres
b9033d004e
amend distance collision check - always find template with shortest distance, also first time (test-case extended);
...
datedetector property template without lock, initially placed start-anchored templates at begin of template list, small optimization of strptime
8 years ago
sebres
75a5440acf
extends date detector template with distance (position of match in log-line), to prevent grave collision using (re)ordered template list (e.g. find-spot of wrong date-match inside foreign input, misleading date patterns by ambiguous formats, etc.);
...
By change of the distance (e.g. another format found), the pattern with smallest distance will be always preferred now.
To speedup (template lookup) resp. minimize of list reorder counts, the distance will be used as divider factor of the template weight by the templates comparison.
8 years ago
sebres
84fe55b99b
[temp commit] 2nd try to optimize datedetector/datetemplate functionality (almost ready, needs fine tuning)
8 years ago
sebres
a7d9de8c52
[temp commit] 1st try to optimize datedetector/datetemplate functionality (fix ambiguous resp. misleading date detection if several formats used in log resp. by format switch after restart of some services):
...
* Misleading date patterns defined more precisely (using extended syntax %E[mdHMS]
for exact two-digit match)
* `filter.d/freeswitch.conf`
- Optional prefixes (server, daemon, dual time) if systemd daemon logs used (gh-1548)
- User part rewritten to accept IPv6 resp. domain after "@" (gh-1548)
8 years ago
sebres
10bdadaef2
fixed sporadically (multi-threading) errors by reload/stop/start of polling filter inside getModified (so prevents to stop running main cycle)
8 years ago
Serg G. Brester
c1174d7935
Merge pull request #1577 from sebres/_0.10/code-review-fix-log-fmt-auto-verbosity
...
0.10/code review + fix log format by auto verbosity
8 years ago
sebres
7f8c48d59e
code review (e. g. remove code duplication) and coverage
8 years ago
sebres
5b40309052
code coverage of server module: switch backend
8 years ago
sebres
57a7795282
code coverage of server module: multiple ignoreregex
8 years ago
sebres
1ef367e77a
fixes log format by starting server with `--loglevel=debug` without specifying of verbosity level
8 years ago
sebres
98f87a1a52
better server-ready event: notify waiting thread if server really ready (communication ready) or failed to start
8 years ago
sebres
c809c3e61e
Merge branch 'master' into 0.10
8 years ago
sebres
15dc2db8bb
Merge pull request #1498 from ahpnils:npf to master:
...
This new action files adds support for the NPF packet filter, available on NetBSD since version 6.0.
Closes #1498
8 years ago
Nils
f7df6026a3
Update Changelog to reflect the new np.conf action
8 years ago
Nils
d08db22b92
Create npf.conf for the NPF packet filter
...
This file adds support for the NPF packet filter, available on NetBSD since version 6.0
8 years ago
Serg G. Brester
77f2dcfdb6
Merge pull request #1576 from sebres/_0.10/fail2ban-regex-coverage
...
tests of fail2ban-regex extended to cover exec_command_line also
8 years ago
sebres
44f93bfbff
increase coverage, better test and output of errors
8 years ago
sebres
7e8575cc56
tests of fail2ban-regex extended to cover exec_command_line also;
...
Closes #1573
8 years ago
Serg G. Brester
733d0ef596
Merge pull request #1569 from sebres/_0.10/fix-fakegooglebot
...
fixes deprecated DNSUtils.IsValidIP in fakegooglebot ignore command
8 years ago
sebres
2d2d4cf185
amend to c2d2e79b0d48bf66b04c3772c2419f30a4b1f9db: fixed sporadically bug in getBanListExtendedCymruInfo:
...
except dns.resolver.NXDOMAIN:
UnboundLocalError: local variable 'dns' referenced before assignment
8 years ago
sebres
0ae932ba5e
setup fix for python3, bypass directories (__pycache__) created after ignore command was tested
8 years ago
sebres
fa8184d4cc
fixes deprecated DNSUtils.IsValidIP in fakegooglebot ignore command + test covered now;
...
Closes #1559
8 years ago
sebres
973ac9a45c
amend to c2d2e79b0d48bf66b04c3772c2419f30a4b1f9db: missing error variable in import block;
...
additionally fixes forgotten skip for cymru server case, if --no-network specified);
Closes #1568
8 years ago
sebres
c2d2e79b0d
ExtendedCymruInfo: better availability check (code review and timeout's);
...
max sleep time check of too long sleep increased to 1 second (typo fix)
8 years ago
sebres
ee1727ecca
Merge pull request #1563 from niklasf/fix-lazy-ipv6-regex (and sebres/fix-lazy-ipv6-regex) into 0.10
8 years ago
sebres
276759b6c2
ExtendedCymruInfo code review and availability check in test cases;
...
max sleep time check of too long sleep increased to 1 second
8 years ago
sebres
9bf8985e2a
nginx-limit-req.conf: more precise failregex (word-boundary if `<HOST>` should be non-greedy for some reasons)
8 years ago
sebres
06674bb989
use common regex for IP addresses (removed code duplication)
8 years ago
Serg G. Brester
ba9a88977f
Merge pull request #1562 from sebres/_0.10/fix-stability-and-speed
...
0.10/fix stability and speed optimization
8 years ago
sebres
8b0f6c5413
badips test cases check availability of badips service (and skip this tests if it not available)
8 years ago
sebres
9a7c753372
fixes method-related filter for tests of suite loaded with loadTestsFromName (they may be a suite self)
8 years ago
Niklas Fiekas
057f2f3c56
make the ipv6 host regex greedy
...
Previously the regex was lazily matching ``2606:2800:220:1:248:1893:25c8:1946``
as ``2606:2800:220:1:248:1893:25c8:1``.
8 years ago
sebres
77ec9df678
standardize and normalize verbosity parameters for fail2ban-regex / fail2ban-testcases (-v ... -vvvv, or --verbosity=0..4)
8 years ago
sebres
2cfaf845ca
standardize and normalize logging and verbosity formats, logging level etc between command lines (server, client, test-cases);
...
test cases could pass (so increase) verbosity to the client (and furthermore client to the server also), usable for debug purposes resp. simplifying read of the log-file;
custom and precise numeric log-levels can be given in test cases now;
8 years ago
sebres
62b8664175
speedup server start/stop (waiting for communicate, etc);
...
extend server socket with timeouts, extend ping with timeout parameter;
8 years ago
sebres
542419acab
filtertestcase: use shorter sleep (almost just for the context switch here)
8 years ago
sebres
b615ba49ff
disengage testExecuteTimeout test-case from -fast option, just make it faster (timeout shorter) in this case
8 years ago
sebres
b011cf17b2
increase performance of executeCmd (actions), thereby introduced new shorter interval for fast operations (leaves unchanged default wait operation intervals (sleep time, threshold interval) - for the same inertance, to save same system (load by many jails resp. log files);
...
extends wait_for with callable timeout (test case fixed);
8 years ago
sebres
310d4e224d
Merge branch master (0.9) into 0.10
8 years ago
Serg G. Brester
8e3e333d54
Update ChangeLog
8 years ago
Serg G. Brester
d9e1a4f547
Merge pull request #1556 from szepeviktor/master
...
Monit config: scripting is not supported in path
8 years ago
Serg G. Brester
a0d8581a2c
Merge pull request #1557 from sebres/_0.10/fix-reload-bug
...
0.10/reload-and-more: reload without restart, stability and performance fixes
8 years ago
sebres
5151c4fa6d
ChangeLog entries added
8 years ago
sebres
5e4fdb60c8
extended test-cases (coverage)
8 years ago
sebres
449c46aec4
extended test-cases (coverage)
8 years ago