Re: [Prelude Hybrid IDS] #229: Fix format when checking apache logfile(s)
"Prelude Hybrid IDS" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#229: Fix format when checking apache logfile(s)
-----------------------+----------------------------------------------------
Reporter: anonymous | Owner: yoann
Type: defect | Status: closed
Priority: normal | Milestone: Prelude-LML 0.9.11
Component: generic | Version: 0.9
Severity: minor | Resolution: fixed
Keywords: |
-----------------------+----------------------------------------------------
Comment (by [email protected]):
I think this is still wrong. It should read ' [+-].{4}\] " on line 76 (as
stated in Robin Gruyters orginal remarks).
The '\[' renders to a 'No match'.....
71 #
72 # Sample configuration for apache:
73 #
74 [format=apache]
75 time-format = "%d/%b/%Y:%H:%M:%S"
76 prefix-regex = "^(?P<hostname>\S+) \S+ \S+ \[(?P<timestamp>.{20})
\[+-].{4}\] "
77 file = /var/log/apache2/access_log
78
79
--
Ticket URL: <https://trac.prelude-ids.org/ticket/229#comment:4>
Prelude Hybrid IDS <http://www.prelude-ids.org>
The Prelude Hybrid Intrusion Detection System suite
_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel