Attachment 152989 Details for Bug 227805 – Extended patch

[patch] Extended patch

logwatch-sshd.patch (text/plain), 1.24 KB, created by John Robinson on 2007-04-19 10:35:23 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: John Robinson

Created: 2007-04-19 10:35:23 UTC

Size: 1.24 KB

patch

obsolete

>--- /etc/log.d/scripts/services/sshd	2005-08-23 02:16:47.000000000 +0100
>+++ logwatch-sshd-patched	2007-04-19 11:31:55.000000000 +0100
>@@ -92,15 +92,15 @@
>          print STDERR "DEBUG: Found -Failed login- line\n";
>       }
>       $BadLogins{"$2/$1 from $3"}++;
>-   } elsif ( $ThisLine =~ m/^Failed (\S+) for illegal user (.*) from ([^ ]+) port (\d+)/ ) { #openssh
>+   } elsif ( $ThisLine =~ m/^Failed (\S+) for invalid user (.*) from ([^ ]+) port (\d+)/ ) { #openssh
>       $Temp = "$2/$1 from $3";
>       $BadLogins{$Temp}++;
>       $IllegalUsers{$Temp}++;
>    } elsif ( ($User) = ( $ThisLine =~ /Disconnecting: Too many authentication failures for ([^ ]+)/)) {
>       $TooManyFailures{$User}++;
>-   } elsif ( ($User) = ($ThisLine =~ /^input_userauth_request: illegal user (.*)$/ )) {
>+   } elsif ( ($User) = ($ThisLine =~ /^input_userauth_request: invalid user (.*)$/ )) {
>       $IllegalUsers{"$User/none from unknown"}++;
>-   } elsif ( $ThisLine =~ m/^Illegal user (.*) from ([^ ]+)/ ) { #redhat thing
>+   } elsif ( $ThisLine =~ m/^Invalid user (.*) from ([^ ]+)/ ) { #redhat thing
>       $IllegalUsers{"$1/none from $2"}++;
>    } elsif ( $ThisLine =~ m/^(fatal: )?Did not receive ident(ification)? string from (.+)/ ) { # ssh/openssh
>       $name = LookupIP($3);

Actions: View | Diff

Attachments on bug 227805: 149103 | 152989