Re: [Prelude Hybrid IDS] #229: Fix format when checking apache logfile(s)
"Prelude Hybrid IDS" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#229: Fix format when checking apache logfile(s)
-----------------------+----------------------------------------------------
Reporter: anonymous | Owner: yoann
Type: defect | Status: closed
Priority: normal | Milestone: Prelude-LML 0.9.11
Component: generic | Version: 0.9
Severity: minor | Resolution: fixed
Keywords: |
-----------------------+----------------------------------------------------
Comment (by [email protected]):
<Sigh> Must use wikiformatting...
The code (prelude-lml.conf.in: 9557) says:
{{{
71 #
72 # Sample configuration for apache:
73 #
74 [format=apache]
75 time-format = "%d/%b/%Y:%H:%M:%S"
76 prefix-regex = "(?P<hostname>\S+) \S+ \S+ \[(?P<timestamp>.{20})
\[+-].{4}\] "
77 file = /var/log/apache2/access_log
78
79
}}}
I think this is not right. On line 76 it should read {{{ "..... [+-].{4}\]
" }}} as stated in Robin Gruyters orginal remarks.
The {{{".....\[......"}}} renders to "No match".
--
Ticket URL: <https://trac.prelude-ids.org/ticket/229#comment:5>
Prelude Hybrid IDS <http://www.prelude-ids.org>
The Prelude Hybrid Intrusion Detection System suite
_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel