conf/91732: [patch] 800.loginfail: fix log message grep expression

Christian Marg marg at rz.tu-clausthal.de
Thu May 26 08:50:04 UTC 2011


The following reply was made to PR conf/91732; it has been noted by GNATS.

From: Christian Marg <marg at rz.tu-clausthal.de>
To: bug-followup at FreeBSD.org, doconnor at gsoft.com.au
Cc:  
Subject: Re: conf/91732: [patch] 800.loginfail: fix log message grep expression
Date: Thu, 26 May 2011 10:30:34 +0200

 This is a cryptographically signed message in MIME format.
 
 --------------ms020507050700000801060303
 Content-Type: multipart/mixed;
  boundary="------------020303040004040106000607"
 
 This is a multi-part message in MIME format.
 --------------020303040004040106000607
 Content-Type: text/plain; charset=ISO-8859-1; format=flowed
 Content-Transfer-Encoding: quoted-printable
 
 Hello,
 
 this problem is still unresolved in 8.2-RELEASE. For example I see many=20
 "ANON ftp: Login successful." log messages from my ProFTPD, just because =
 
 the host name of the client contains the word "kabel-badenwuerttemberg.de=
 ".
 
 I have a minor correction to Alan Amesbury's patch, which assumes that=20
 there always is a space following the word the expression checks for.=20
 I'd rather use "\b" to check for word boundaries. See the patch in my=20
 attachment. It also finds lines with "auth.*error" in them.
 
 bye
 Christian
 --=20
 Christian Marg                 mail  : mailto:marg at rz.tu-clausthal.de
 Rechenzentrum TU Clausthal     web   : http://www.tu-clausthal.de
 D-38678 Clausthal-Zellerfeld   fon   : 05323/72-2626
 Germany                        jabber: ifcma at jabber.tu-clausthal.de
 
 --------------020303040004040106000607
 Content-Type: text/plain;
  name="loginfail.patch.txt"
 Content-Transfer-Encoding: quoted-printable
 Content-Disposition: attachment;
  filename="loginfail.patch.txt"
 
 --- 800.loginfail-orig  2011-03-03 10:28:00.000000000 +0100
 +++ 800.loginfail 2011-05-26 10:13:04.000000000 +0200
 @@ -59,7 +59,7 @@
      [Yy][Ee][Ss])
         echo ""
         echo "${host} login failures:"
 -       n=3D$(catmsgs | egrep -ia "^$yesterday.*: .*(fail|invalid|bad|ill=
 egal)" |
 +       n=3D$(catmsgs | egrep -ia "^$yesterday.*: .*\b(fail(ures?|ed)?|in=
 valid|bad|illegal|auth.*error)\b" |
             tee /dev/stderr | wc -l)
         [ $n -gt 0 ] && rc=3D1 || rc=3D0;;
      *) rc=3D0;;
 
 --------------020303040004040106000607--
 
 --------------ms020507050700000801060303
 Content-Type: application/pkcs7-signature; name="smime.p7s"
 Content-Transfer-Encoding: base64
 Content-Disposition: attachment; filename="smime.p7s"
 Content-Description: S/MIME Cryptographic Signature
 
 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIUbTCC
 BCEwggMJoAMCAQICAgDHMA0GCSqGSIb3DQEBBQUAMHExCzAJBgNVBAYTAkRFMRwwGgYDVQQK
 ExNEZXV0c2NoZSBUZWxla29tIEFHMR8wHQYDVQQLExZULVRlbGVTZWMgVHJ1c3QgQ2VudGVy
 MSMwIQYDVQQDExpEZXV0c2NoZSBUZWxla29tIFJvb3QgQ0EgMjAeFw0wNjEyMTkxMDI5MDBa
 Fw0xOTA2MzAyMzU5MDBaMFoxCzAJBgNVBAYTAkRFMRMwEQYDVQQKEwpERk4tVmVyZWluMRAw
 DgYDVQQLEwdERk4tUEtJMSQwIgYDVQQDExtERk4tVmVyZWluIFBDQSBHbG9iYWwgLSBHMDEw
 ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpm8NnhfkNrvWNVMOWUDU9YuluTO2U
 1wBblSJ01CDrNI/W7MAxBAuZgeKmFNJSoCgjhIt0iQReW+DieMF4yxbLKDU5ey2QRdDtoAB6
 fL9KDhsAw4bpXCsxEXsM84IkQ4wcOItqaACa7txPeKvSxhObdq3u3ibo7wGvdA/BCaL2a869
 080UME/15eOkyGKbghoDJzANAmVgTe3RCSMqljVYJ9N2xnG2kB3E7f81hn1vM7PbD8URwoqD
 oZRdQWvY0hD1TP3KUazZve+Sg7va64sWVlZDz+HVEz2mHycwzUlU28kTNJpxdcVs6qcLmPkh
 nSevPqM5OUhqjK3JmfvDEvK9AgMBAAGjgdkwgdYwcAYDVR0fBGkwZzBloGOgYYZfaHR0cDov
 L3BraS50ZWxlc2VjLmRlL2NnaS1iaW4vc2VydmljZS9hZl9Eb3dubG9hZEFSTC5jcmw/LWNy
 bF9mb3JtYXQ9WF81MDkmLWlzc3Vlcj1EVF9ST09UX0NBXzIwHQYDVR0OBBYEFEm3xs/oPR9/
 6kR7Eyn38QpwPt5kMB8GA1UdIwQYMBaAFDHDeRu69VPXF+CJei0XbAqzK50zMA4GA1UdDwEB
 /wQEAwIBBjASBgNVHRMBAf8ECDAGAQH/AgECMA0GCSqGSIb3DQEBBQUAA4IBAQA74Vp3wEgX
 3KkY7IGvWonwvSiSpspZGBJw7Cjy565/lizn8l0ZMfYTK3S9vYCyufdnyTmieTvhERHua3iR
 M347XyYndVNljjNj7s9zw7CSI0khUHUjoR8Y4pSFPT8z6XcgjaK95qGFKUD2P3MyWA0Ja6ba
 hWzAP7uNZmRWJE6uDT8yNQFb6YyC2XJZT7GGhfF0hVblw/hc843uR7NTBXDn5U2KaYMo4RMJ
 hp5eyOpYHgwf+aTUWgRo/Sg+iwK2WLX2oSw3VwBnqyNojWOl75lrXP1LVvarQIc01BGSbOyH
 xQoLBzNytG8MHVQs2FHHzL8w00Ny8TK/jM5JY6gA9/IcMIIFKDCCBBCgAwIBAgIECgyxljAN
 BgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJERTETMBEGA1UEChMKREZOLVZlcmVpbjEQMA4G
 A1UECxMHREZOLVBLSTEkMCIGA1UEAxMbREZOLVZlcmVpbiBQQ0EgR2xvYmFsIC0gRzAxMB4X
 DTA3MDMwNjA5MjczNloXDTE5MDMwNTAwMDAwMFowgZgxCzAJBgNVBAYTAkRFMSowKAYDVQQK
 EyFUZWNobmlzY2hlIFVuaXZlcnNpdGFldCBDbGF1c3RoYWwxFjAUBgNVBAsTDVJlY2hlbnpl
 bnRydW0xHjAcBgNVBAMTFVRVIENsYXVzdGhhbCBDQSAtIEcwMjElMCMGCSqGSIb3DQEJARYW
 cGtpQHJ6LnR1LWNsYXVzdGhhbC5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
 ALiTQIGm718nnhWt8IiMlFmK9AMhGYmhTWZO41XHR4PTg9fvFBULkpqBJzl/U9LwAtDTmvyk
 FQ1+OdWm7qdDJhSiJnNTKZTHXYYG6aTdRLakwYNmB2IZNnNqeEuqS7qJzPZdiebNzRJsh11x
 UUbOlIfA3N8MOLS+Jj2N+R8R05jeLFoSGBAQqDyI9RwbqoLxf8rKlvcAzpJHDEMkA6AYcaNM
 jp6MTfN7xQB+VS6w/0NroT+plTXts+omff1mKfNvVROpC+lKi3jVW8kVU31zrarX+l39vnoI
 hkb6Nb81vguc4P5x/r3EyddaO/3WX2KHAk7mf6ml8tJHTFi5D1XRtakCAwEAAaOCAbUwggGx
 MA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgEGMB0GA1UdDgQWBBRi/JK35+3zHzVVW8lD
 31CzXvQQJTAfBgNVHSMEGDAWgBRJt8bP6D0ff+pEexMp9/EKcD7eZDAhBgNVHREEGjAYgRZw
 a2lAcnoudHUtY2xhdXN0aGFsLmRlMIGIBgNVHR8EgYAwfjA9oDugOYY3aHR0cDovL2NkcDEu
 cGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1jYS9wdWIvY3JsL2NhY3JsLmNybDA9oDugOYY3aHR0
 cDovL2NkcDIucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1jYS9wdWIvY3JsL2NhY3JsLmNybDCB
 ogYIKwYBBQUHAQEEgZUwgZIwRwYIKwYBBQUHMAKGO2h0dHA6Ly9jZHAxLnBjYS5kZm4uZGUv
 Z2xvYmFsLXJvb3QtY2EvcHViL2NhY2VydC9jYWNlcnQuY3J0MEcGCCsGAQUFBzAChjtodHRw
 Oi8vY2RwMi5wY2EuZGZuLmRlL2dsb2JhbC1yb290LWNhL3B1Yi9jYWNlcnQvY2FjZXJ0LmNy
 dDANBgkqhkiG9w0BAQUFAAOCAQEAL1N0jYuGTKeAv4RmqAC+0P+KjwAJjh2gMA/Z4au84EUf
 ana4G4Im2lM8BhuNAEyxKJeU4WWcMMHqBicK1xl2OpxOsEsRb7i++aIHe/+DMqKMdteZUkjw
 XP+H59V1ZgN7DKAXvIguKEYgVsPpNluPJyKX0jeDw+hGxo0RnepZG1Hn7b5HctJQxAjn8Zf3
 VHVMf3oN3NAQ3EnN8G6FOwcoC5JT+baqAS0K/rvhPTAUWvi8S0WRxzBbHK4I/LvKE5mLO9uI
 Akj8r11haKAdpepamqzq4QNKf/UqJB7w2N6Ruve1MwZh90lxelWquWjvtXOJrcL8QzlhfNTB
 u/8nqloIFTCCBYowggRyoAMCAQICBBEMpRgwDQYJKoZIhvcNAQEFBQAwgZgxCzAJBgNVBAYT
 AkRFMSowKAYDVQQKEyFUZWNobmlzY2hlIFVuaXZlcnNpdGFldCBDbGF1c3RoYWwxFjAUBgNV
 BAsTDVJlY2hlbnplbnRydW0xHjAcBgNVBAMTFVRVIENsYXVzdGhhbCBDQSAtIEcwMjElMCMG
 CSqGSIb3DQEJARYWcGtpQHJ6LnR1LWNsYXVzdGhhbC5kZTAeFw0xMDExMjQxNDU2MDhaFw0x
 MzExMjMxNDU2MDhaMFIxCzAJBgNVBAYTAkRFMSowKAYDVQQKEyFUZWNobmlzY2hlIFVuaXZl
 cnNpdGFldCBDbGF1c3RoYWwxFzAVBgNVBAMTDkNocmlzdGlhbiBNYXJnMIIBIjANBgkqhkiG
 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhoPQ/hBKDDMjyXqz6cG6G+k5YHGdHfv9gh3w6ncuh5u
 rEJ6/SpcqpiFZxPYRLKd5bsM3cf0ELrAsT7f5UoFuKtyEX4Pn5Ww4N0uj82tlxmlT0No3CAV
 t1Pc7a1juYgV4O63m/igRevZl2u+9AhYJaxqYTOx1BBim7wjx0lQHBTHz26/UueUudakEVnF
 kNelGzQ3oSiIShii3CrSH22uOQ3r7zQ+KakwbqjNV+l/mD3W+QMBhyQvvARPJHkPeGe5HwDo
 6b7zzVDoCGai7EyeGapmdNN8gDfhgTNKDtlLkskSCqUMHDKvT/13dzOjS2iU29Azzk4jTHS5
 n64dZJCrswIDAQABo4ICHzCCAhswCQYDVR0TBAIwADALBgNVHQ8EBAMCBeAwKQYDVR0lBCIw
 IAYIKwYBBQUHAwIGCCsGAQUFBwMEBgorBgEEAYI3FAICMB0GA1UdDgQWBBTbwx34N/hSwNmT
 T75NQUtPFcvKsjAfBgNVHSMEGDAWgBRi/JK35+3zHzVVW8lD31CzXvQQJTBZBgNVHREEUjBQ
 gRdtYXJnQHJ6LnR1LWNsYXVzdGhhbC5kZYEeY2hyaXN0aWFuLm1hcmdAdHUtY2xhdXN0aGFs
 LmRlgRVpZmNtYUB0dS1jbGF1c3RoYWwuZGUwgY8GA1UdHwSBhzCBhDBAoD6gPIY6aHR0cDov
 L2NkcDEucGNhLmRmbi5kZS90dS1jbGF1c3RoYWwtY2EvcHViL2NybC9nX2NhY3JsLmNybDBA
 oD6gPIY6aHR0cDovL2NkcDIucGNhLmRmbi5kZS90dS1jbGF1c3RoYWwtY2EvcHViL2NybC9n
 X2NhY3JsLmNybDCBqAYIKwYBBQUHAQEEgZswgZgwSgYIKwYBBQUHMAKGPmh0dHA6Ly9jZHAx
 LnBjYS5kZm4uZGUvdHUtY2xhdXN0aGFsLWNhL3B1Yi9jYWNlcnQvZ19jYWNlcnQuY3J0MEoG
 CCsGAQUFBzAChj5odHRwOi8vY2RwMi5wY2EuZGZuLmRlL3R1LWNsYXVzdGhhbC1jYS9wdWIv
 Y2FjZXJ0L2dfY2FjZXJ0LmNydDANBgkqhkiG9w0BAQUFAAOCAQEAJkHb85tF8rblRsyfYP3A
 d+iFCsrzdPucM289YAxycNCF31ispgj8dwk7qWE6bPtENRgplNN2yYGAGdGdOz9Tq7kzV0Ws
 8gB+PNLXUuLmWK/FbpBDPfVd3tveB8e4ZBLrzM19zVID8n/x7gYvy9BF6cYega2Vb6eZBUt8
 QdgCQJM9KgSzn1ip63o1F1GAyjfs1+/lM0BF+29+3xJUKDqc/DctTgI8rsR/a9eCUGmZVXFY
 0p2i9QbUzjIIHgG8ICuquJ3Nj6EpGzi+GDm/W538D9HI1Vt3lDKiDLz9gjF/aitr0JmCCRQv
 30PwfIGYfEmZwvJotQRkrfu4rUh16B4L2jCCBYowggRyoAMCAQICBBEMpRgwDQYJKoZIhvcN
 AQEFBQAwgZgxCzAJBgNVBAYTAkRFMSowKAYDVQQKEyFUZWNobmlzY2hlIFVuaXZlcnNpdGFl
 dCBDbGF1c3RoYWwxFjAUBgNVBAsTDVJlY2hlbnplbnRydW0xHjAcBgNVBAMTFVRVIENsYXVz
 dGhhbCBDQSAtIEcwMjElMCMGCSqGSIb3DQEJARYWcGtpQHJ6LnR1LWNsYXVzdGhhbC5kZTAe
 Fw0xMDExMjQxNDU2MDhaFw0xMzExMjMxNDU2MDhaMFIxCzAJBgNVBAYTAkRFMSowKAYDVQQK
 EyFUZWNobmlzY2hlIFVuaXZlcnNpdGFldCBDbGF1c3RoYWwxFzAVBgNVBAMTDkNocmlzdGlh
 biBNYXJnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhoPQ/hBKDDMjyXqz6cG
 6G+k5YHGdHfv9gh3w6ncuh5urEJ6/SpcqpiFZxPYRLKd5bsM3cf0ELrAsT7f5UoFuKtyEX4P
 n5Ww4N0uj82tlxmlT0No3CAVt1Pc7a1juYgV4O63m/igRevZl2u+9AhYJaxqYTOx1BBim7wj
 x0lQHBTHz26/UueUudakEVnFkNelGzQ3oSiIShii3CrSH22uOQ3r7zQ+KakwbqjNV+l/mD3W
 +QMBhyQvvARPJHkPeGe5HwDo6b7zzVDoCGai7EyeGapmdNN8gDfhgTNKDtlLkskSCqUMHDKv
 T/13dzOjS2iU29Azzk4jTHS5n64dZJCrswIDAQABo4ICHzCCAhswCQYDVR0TBAIwADALBgNV
 HQ8EBAMCBeAwKQYDVR0lBCIwIAYIKwYBBQUHAwIGCCsGAQUFBwMEBgorBgEEAYI3FAICMB0G
 A1UdDgQWBBTbwx34N/hSwNmTT75NQUtPFcvKsjAfBgNVHSMEGDAWgBRi/JK35+3zHzVVW8lD
 31CzXvQQJTBZBgNVHREEUjBQgRdtYXJnQHJ6LnR1LWNsYXVzdGhhbC5kZYEeY2hyaXN0aWFu
 Lm1hcmdAdHUtY2xhdXN0aGFsLmRlgRVpZmNtYUB0dS1jbGF1c3RoYWwuZGUwgY8GA1UdHwSB
 hzCBhDBAoD6gPIY6aHR0cDovL2NkcDEucGNhLmRmbi5kZS90dS1jbGF1c3RoYWwtY2EvcHVi
 L2NybC9nX2NhY3JsLmNybDBAoD6gPIY6aHR0cDovL2NkcDIucGNhLmRmbi5kZS90dS1jbGF1
 c3RoYWwtY2EvcHViL2NybC9nX2NhY3JsLmNybDCBqAYIKwYBBQUHAQEEgZswgZgwSgYIKwYB
 BQUHMAKGPmh0dHA6Ly9jZHAxLnBjYS5kZm4uZGUvdHUtY2xhdXN0aGFsLWNhL3B1Yi9jYWNl
 cnQvZ19jYWNlcnQuY3J0MEoGCCsGAQUFBzAChj5odHRwOi8vY2RwMi5wY2EuZGZuLmRlL3R1
 LWNsYXVzdGhhbC1jYS9wdWIvY2FjZXJ0L2dfY2FjZXJ0LmNydDANBgkqhkiG9w0BAQUFAAOC
 AQEAJkHb85tF8rblRsyfYP3Ad+iFCsrzdPucM289YAxycNCF31ispgj8dwk7qWE6bPtENRgp
 lNN2yYGAGdGdOz9Tq7kzV0Ws8gB+PNLXUuLmWK/FbpBDPfVd3tveB8e4ZBLrzM19zVID8n/x
 7gYvy9BF6cYega2Vb6eZBUt8QdgCQJM9KgSzn1ip63o1F1GAyjfs1+/lM0BF+29+3xJUKDqc
 /DctTgI8rsR/a9eCUGmZVXFY0p2i9QbUzjIIHgG8ICuquJ3Nj6EpGzi+GDm/W538D9HI1Vt3
 lDKiDLz9gjF/aitr0JmCCRQv30PwfIGYfEmZwvJotQRkrfu4rUh16B4L2jGCA/cwggPzAgEB
 MIGhMIGYMQswCQYDVQQGEwJERTEqMCgGA1UEChMhVGVjaG5pc2NoZSBVbml2ZXJzaXRhZXQg
 Q2xhdXN0aGFsMRYwFAYDVQQLEw1SZWNoZW56ZW50cnVtMR4wHAYDVQQDExVUVSBDbGF1c3Ro
 YWwgQ0EgLSBHMDIxJTAjBgkqhkiG9w0BCQEWFnBraUByei50dS1jbGF1c3RoYWwuZGUCBBEM
 pRgwCQYFKw4DAhoFAKCCAiowGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0B
 CQUxDxcNMTEwNTI2MDgzMDM0WjAjBgkqhkiG9w0BCQQxFgQUaq01jo2xT2bfWt7ATdseU9js
 48EwXwYJKoZIhvcNAQkPMVIwUDALBglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYIKoZIhvcN
 AwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGyBgkrBgEE
 AYI3EAQxgaQwgaEwgZgxCzAJBgNVBAYTAkRFMSowKAYDVQQKEyFUZWNobmlzY2hlIFVuaXZl
 cnNpdGFldCBDbGF1c3RoYWwxFjAUBgNVBAsTDVJlY2hlbnplbnRydW0xHjAcBgNVBAMTFVRV
 IENsYXVzdGhhbCBDQSAtIEcwMjElMCMGCSqGSIb3DQEJARYWcGtpQHJ6LnR1LWNsYXVzdGhh
 bC5kZQIEEQylGDCBtAYLKoZIhvcNAQkQAgsxgaSggaEwgZgxCzAJBgNVBAYTAkRFMSowKAYD
 VQQKEyFUZWNobmlzY2hlIFVuaXZlcnNpdGFldCBDbGF1c3RoYWwxFjAUBgNVBAsTDVJlY2hl
 bnplbnRydW0xHjAcBgNVBAMTFVRVIENsYXVzdGhhbCBDQSAtIEcwMjElMCMGCSqGSIb3DQEJ
 ARYWcGtpQHJ6LnR1LWNsYXVzdGhhbC5kZQIEEQylGDANBgkqhkiG9w0BAQEFAASCAQCzT2WG
 G1v3c0iB+rCmr/F9q2F4rplfyGjTIn5u1xmEWHs8bNbURj1DXGxIg6wUSAR6/qK9EMfQrhkg
 fh3nAcF6DeXl99nqqqLbe10g56RijmZPD5rddiGLDBe3pTEsp6NN6/57NHPzECeSqqJlkAmj
 7Z9amWeRmlFlZCBWlsEJTbgimw5EyHZvetskc6c+TCa7D0E1w3obYg04T1aG/XGYHv1S+Tdd
 T4jBQUYhKN7O1QFYShZBmvBFAbWPxyz4x0TYViqLPRbYFIxJySMNj/9bjKQGC4XXSZn89DIb
 GFsspnLCjFkYFPOf674tw3mxJnI4X8MrLY2HUu22uI3S6e6QAAAAAAAA
 --------------ms020507050700000801060303--


More information about the freebsd-bugs mailing list