add: [sshd] regex mishap
parent
182b8c103a
commit
9379701444
|
@ -52,6 +52,12 @@ var expected = map[int]map[string]string{
|
|||
"username": "",
|
||||
"src": "185.56.8.191",
|
||||
},
|
||||
7: map[string]string{
|
||||
"date": "Feb 3 06:50:51",
|
||||
"host": "sigmund",
|
||||
"username": "apples",
|
||||
"src": "37.117.180.69",
|
||||
},
|
||||
}
|
||||
|
||||
func TestSshdParser(t *testing.T) {
|
||||
|
@ -65,7 +71,7 @@ func TestSshdParser(t *testing.T) {
|
|||
scanner := bufio.NewScanner(f)
|
||||
c := 0
|
||||
for scanner.Scan() {
|
||||
re := regexp.MustCompile(`^(?P<date>[[:alpha:]]{3}\s\d{2}\s\d{2}:\d{2}:\d{2}) (?P<host>[^ ]+) sshd\[[[:alnum:]]+\]: Invalid user (?P<username>.*) from (?P<src>.*$)`)
|
||||
re := regexp.MustCompile(`^(?P<date>[[:alpha:]]{3} {1,2}\d{1,2}\s\d{2}:\d{2}:\d{2}) (?P<host>[^ ]+) sshd\[[[:alnum:]]+\]: Invalid user (?P<username>.*) from (?P<src>.*$)`)
|
||||
n1 := re.SubexpNames()
|
||||
r2 := re.FindAllStringSubmatch(scanner.Text(), -1)[0]
|
||||
|
||||
|
|
|
@ -5,3 +5,4 @@ Jan 22 11:33:07 sigmund sshd[26109]: Invalid user ki from 49.233.183.158
|
|||
Jan 22 11:29:16 sigmund sshd[26091]: Invalid user a.min from 185.56.8.191
|
||||
Jan 22 11:29:16 sigmund sshd[26091]: Invalid user from 185.56.8.191
|
||||
Jan 22 11:29:16 sigmund sshd[26091]: Invalid user from 185.56.8.191
|
||||
Feb 3 06:50:51 sigmund sshd[12611]: Invalid user apples from 37.117.180.69
|
Loading…
Reference in New Issue