"Fossies" - the Fresh Open Source Software Archive

Member "sshdfilter-1.5.7/patterns/rh7390.partconf" (16 Apr 2007, 1455 Bytes) of package /linux/privat/old/sshdfilter-1.5.7.tar.gz:

As a special service "Fossies" has tried to format the requested text file into HTML format (style: standard) with prefixed line numbers. Alternatively you can here view or download the uninterpreted source code file.

A hint: This file contains one or more very long lines, so maybe it is better readable using the pure text view mode that shows the contents as wrapped lines within the browser window.

    1 # The SSHDLOG section maps sshd messages into one of several types, Invalid User, Bad password for valid user, Good password for valid user and No Id string. Each version and distribution uses different message formats, so the exact format needs to be user configurable. These are already supplied for quite a few distributions.
    2 
    3 # Invalid user or Failed user
    4 #msg_invalid='^Illegal user (.*) from ([0-9a-fA-F:\.]+)'
    5 #map_invalid='push @res,$1;  push @res,$2;'
    6 
    7 msg_invalid='^Failed [^ ]+ for illegal user (.*) from ([0-9a-fA-F:\.]+) port [0-9]+ ssh2'
    8 map_invalid='push @res,$1;  push @res,$2;'
    9 msg_invalid='^User (.*) from ([0-9a-fA-F:\.]+) not allowed because not listed in AllowUsers'
   10 map_invalid='push @res,$1;  push @res,$2;'
   11 
   12 # Failed valid user
   13 msg_failed_valid='^Failed password for (.*) from ([0-9a-fA-F:\.]+) port [0-9]+ ssh2'
   14 map_failed_valid='push @res,$1;  push @res,$2;'
   15 
   16 # Accepted a valid user
   17 #[7299] Feb 23 19:45:46 password auth succeeded for 'vladimir' from 127.0.0.1:33462
   18 msg_accepted_user='^Accepted [^ ]+ for (.*) from ([0-9a-fA-F:\.]+) port [0-9]+ ssh2'
   19 map_accepted_user='push @res,$1;  push @res,$2;'
   20 
   21 # [7412] Feb 23 19:50:33 exit before auth: Failed to get remote version
   22 msg_no_id_string='^Did not receive identification string from ([0-9a-fA-F:\.]+)'
   23 map_no_id_string='push @res,$1;'
   24 
   25 # [7272] Feb 23 19:52:16 premature exit: Terminated by signal
   26 msg_quit='^Received signal ([0-9]+); terminating.'
   27 map_quit='push @res,$1;'
   28