blob: 51f9915e183d2fb3b1675098ab86f498b79c66ae (
plain)
1
2
3
4
5
6
7
8
9
10
11
|
--- sshguard-1.5/src/parser/attack_scanner.l
+++ sshguard-1.5-mod/src/parser/attack_scanner.l
@@ -107,7 +107,7 @@
*/
/* handle entries with PID and without PID from processes other than sshguard */
-{TIMESTAMP_SYSLOG}[ ]+([a-zA-Z0-9]|{WORD}|{HOSTADDR})[ ]+{PROCESSNAME}"["{NUMBER}"]: "{SOLARIS_MSGID_TAG}? {
+{TIMESTAMP_SYSLOG}[ ]+([a-zA-Z0-9]|{WORD}|{HOSTADDR})[ ]+([a-zA-Z0-9]|{WORD}|{HOSTADDR})[ ]+{PROCESSNAME}"["{NUMBER}"]: "{SOLARIS_MSGID_TAG}? {
/* extract PID */
yylval.num = getsyslogpid(yytext, yyleng);
return SYSLOG_BANNER_PID;
|
