From b1c23cfe8fff7571899e39ed6dd2a9cf3043fd39 Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Sun, 12 Feb 2012 10:11:21 +0000 Subject: main/sshguard: moved from testing --- main/sshguard/parser.patch | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 main/sshguard/parser.patch (limited to 'main/sshguard/parser.patch') diff --git a/main/sshguard/parser.patch b/main/sshguard/parser.patch new file mode 100644 index 000000000..51f9915e1 --- /dev/null +++ b/main/sshguard/parser.patch @@ -0,0 +1,11 @@ +--- sshguard-1.5/src/parser/attack_scanner.l ++++ sshguard-1.5-mod/src/parser/attack_scanner.l +@@ -107,7 +107,7 @@ + */ + + /* handle entries with PID and without PID from processes other than sshguard */ +-{TIMESTAMP_SYSLOG}[ ]+([a-zA-Z0-9]|{WORD}|{HOSTADDR})[ ]+{PROCESSNAME}"["{NUMBER}"]: "{SOLARIS_MSGID_TAG}? { ++{TIMESTAMP_SYSLOG}[ ]+([a-zA-Z0-9]|{WORD}|{HOSTADDR})[ ]+([a-zA-Z0-9]|{WORD}|{HOSTADDR})[ ]+{PROCESSNAME}"["{NUMBER}"]: "{SOLARIS_MSGID_TAG}? { + /* extract PID */ + yylval.num = getsyslogpid(yytext, yyleng); + return SYSLOG_BANNER_PID; -- cgit v1.2.3