SF.net SVN: logwatch:[68] scripts/services/http

Revision: 68
          http://logwatch.svn.sourceforge.net/logwatch/?rev=68&view=rev
Author:   opoplawski
Date:     2011-10-18 15:07:32 +0000 (Tue, 18 Oct 2011)
Log Message:
-----------
Apply ignoreURLs and ignoreIPs to hack check

Modified Paths:
--------------
    scripts/services/http

Modified: scripts/services/http
===================================================================
--- scripts/services/http	2011-08-22 16:30:48 UTC (rev 67)
+++ scripts/services/http	2011-10-18 15:07:32 UTC (rev 68)
@@ -497,7 +497,9 @@
    if (!$ignore_error_hacks) {
       for (my $i = 0; $i < @exploits; $i++) {
          # print "$i $exploits[$i] $field{lc_url} \n";
-         if ($field{lc_url} =~ /$exploits[$i]/i) {
+         if ( ($field{lc_url} =~ /$exploits[$i]/i) &&
+              !((defined $ignoreURLs) && ($field{url} =~ /$ignoreURLs/)) &&
+              !((defined $ignoreIPs) && ($field{client_ip} =~ /$ignoreIPs/)) ) {
             $hacks{$field{client_ip}}{$exploits[$i]}++;
             $total_hack_count += 1;
             $ban_ip{$field{client_ip}} = " ";

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.


------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2d-oct