[Logcheck-commits] r1574 - in logcheck/trunk: debian docs/tools

madduck at users.alioth.debian.org madduck at users.alioth.debian.org
Mon May 21 22:46:04 UTC 2007


Author: madduck
Date: 2007-05-21 22:46:04 +0000 (Mon, 21 May 2007)
New Revision: 1574

Modified:
   logcheck/trunk/debian/changelog
   logcheck/trunk/docs/tools/log-summary-ssh
Log:
* Patch for log-summary-ssh by Justin Pryzby to ignore messages related to
  invalid users as well as illegal ones (closes: #422525).

Modified: logcheck/trunk/debian/changelog
===================================================================
--- logcheck/trunk/debian/changelog	2007-05-21 22:35:33 UTC (rev 1573)
+++ logcheck/trunk/debian/changelog	2007-05-21 22:46:04 UTC (rev 1574)
@@ -1,4 +1,4 @@
-logcheck (1.2.57~unreleased.3) UNRELEASED; urgency=low
+logcheck (1.2.57~unreleased.4) UNRELEASED; urgency=low
 
   * ignore.d.server/teapop:
     - ignore reverse DNS errors and dropped connections, thanks to Stephan
@@ -36,8 +36,11 @@
 
   * Made dependency on logtail unversioned.
 
- -- martin f. krafft <madduck at debian.org>  Tue, 22 May 2007 00:17:55 +0200
+  * Patch for log-summary-ssh by Justin Pryzby to ignore messages related to
+    invalid users as well as illegal ones (closes: #422525).
 
+ -- martin f. krafft <madduck at debian.org>  Tue, 22 May 2007 00:44:30 +0200
+
 logcheck (1.2.56) unstable; urgency=low
 
   * Thanks to Eric Evans and Russ Allbery for their contributions.

Modified: logcheck/trunk/docs/tools/log-summary-ssh
===================================================================
--- logcheck/trunk/docs/tools/log-summary-ssh	2007-05-21 22:35:33 UTC (rev 1573)
+++ logcheck/trunk/docs/tools/log-summary-ssh	2007-05-21 22:46:04 UTC (rev 1574)
@@ -32,7 +32,7 @@
 my $invf = 0;			# flag values
 
 while (<>) {
-  if (m/^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Illegal user (.*) from (.*)$/) {
+  if (m/^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: (?:Illegal|Invalid) user (.*) from (.*)$/) {
     my $ip = $2;
     chomp $ip;
     $h{$ip} ++;




More information about the Logcheck-commits mailing list