On Tuesday 03 October 2006 15:44, you wrote:
> On Tue, 3 Oct 2006, Janne Pikkarainen wrote:
> > Yes, it works perfectly well!
>
> Great.
>
> This could be "better" though when testing on your sample:
> egrep "^[^#].*(udp|tcp)\(" /etc/syslog-ng/syslog-ng.conf

Yes, but that would be very unreliable:

- a single space between udp/tcp and host address is enough to break that 
regexp.

- no multiline/indentation support.

- a very greedy one: if someone has a source/filter/destination with tcp/udp 
in its name, a false positive could be returned.

- a comment line with some whitespace and # after those would not match.

So if possible, better to stick with your previous Chimera. :-)


Cheers, 

Jaba

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Rkhunter-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to