On 19-Aug-2010, at 14:33, René Berber wrote:
> 
> SSHD_FORMAT_REGEX=.* (sshd.*:|\[sshd\]|AppleVNCServer\[\d+\]:)
> (?P<message>.*)

That does not match the VNC lines in my logs. It matches the ssh lines just fine

If I change \d to [0-9] it works.

$ sudo bzgrep -e "AppleVNCServer\[[0-9]+\]:" /var/log/secure.log.0.bz2 
Aug 19 16:56:00 cerebus 
/System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/MacOS/AppleVNCServer[62764]:
 Authentication: FAILED :: User Name: N/A :: Viewer Address: 189.62.90.210 :: 
Type: VNC DES
Aug 19 16:56:35 cerebus 
/System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/MacOS/AppleVNCServer[62764]:
 Authentication: FAILED :: User Name: N/A :: Viewer Address: 189.62.90.210 :: 
Type: VNC DES
Aug 19 16:57:10 cerebus 
/System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/MacOS/AppleVNCServer[62764]:
 Authentication: FAILED :: User Name: N/A :: Viewer Address: 189.62.90.210 :: 
Type: VNC DES
Aug 19 16:57:45 cerebus 
/System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/MacOS/AppleVNCServer[62764]:
 Authentication: FAILED :: User Name: N/A :: Viewer Address: 189.62.90.210 :: 
Type: VNC DES

try

SSHD_FORMAT_REGEX=.* (sshd.*:|\[sshd\]|AppleVNCServer\[[0-9]+\]:) 
(?P<message>.*)

-- 
Yes, I do happen to believe that love is mainly about pushing chocolate
covered candies and, y'know, in some cultures, a chicken. You can call
me a sucker, I don't care, because I do believe in it. Bottom line: it's
couples who are truly right for each other that wade through the same
crap as everybody else, but the big difference is they don't let it take
them down. One of those two people will stand up and fight for that
relationship every time. If it's right, and they're real lucky, one of
them will say something.


------------------------------------------------------------------------------
This SF.net email is sponsored by 

Make an app they can't live without
Enter the BlackBerry Developer Challenge
http://p.sf.net/sfu/RIM-dev2dev 
_______________________________________________
Denyhosts-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/denyhosts-user

Reply via email to