LuKreme wrote: > On 19-Aug-2010, at 14:33, René Berber wrote: >> I see the regex I sent is missing a space, could you test these >> exactly as shown (except for the unintended line wrapping): >> >> SSHD_FORMAT_REGEX=.* (sshd.*:|\[sshd\]|AppleVNCServer\[\d+\]:) >> (?P<message>.*) >> >> USERDEF_FAILED_ENTRY_REGEX=Authentication: FAILED :: User Name: >> (?P<user>\S+) :: Viewer Address: (?P<host>\S+) .* > > > Quick question, is there supposed to be any white space between :) > and (?P<message or between name: and (?P<user> ?
Yes. > in the last 24 hours I am getting HAMMERED with VNC connection > attempts. > > Also, most of the VNC connections I see come up with a User Name : > N/A, is that going to be an issue? No, the \S+ means anything different than space, but not empty (empty would be a problem for the regex). -- René Berber ------------------------------------------------------------------------------ This SF.net Dev2Dev email is sponsored by: Show off your parallel programming skills. Enter the Intel(R) Threading Challenge 2010. http://p.sf.net/sfu/intel-thread-sfd _______________________________________________ Denyhosts-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/denyhosts-user
