From 54317d7c3b1c35de63f909cf16bf2de531030533 Mon Sep 17 00:00:00 2001 From: JoelSnyder Date: Mon, 2 Jun 2014 22:58:39 -0700 Subject: [PATCH] Create test for oracleims filter This test file shows configuration information for the application, three log lines that DO match the pattern, and one log line that does NOT match the pattern (the first one). --- fail2ban/tests/files/logs/oracleims | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 fail2ban/tests/files/logs/oracleims diff --git a/fail2ban/tests/files/logs/oracleims b/fail2ban/tests/files/logs/oracleims new file mode 100644 index 00000000..aafb27af --- /dev/null +++ b/fail2ban/tests/files/logs/oracleims @@ -0,0 +1,19 @@ +# CONFIGURATION REQUIREMENTS FOR ORACLE IMS v6.3 and ABOVE: +# +# In OPTION.DAT you must have LOG_FORMAT=4 and +# bit 5 of LOG_CONNECTION must be set. +# +# Many of these sub-fields are optional and can be turned on and off +# by the system manager. We need the "tr" field +# (transport information (present if bit 5 of LOG_CONNECTION is +# set and transport information is available)). +# "di" should be there by default if you have LOG_FORMAT=4. +# +# failJSON: { "time": "2014-06-02T22:02:13", "match": false , "host": "23.122.129.179" } + +# failJSON: { "time": "2014-06-02T16:06:33", "match": true , "host": "89.96.245.78" } + +# failJSON: { "time": "2014-06-02T10:08:07", "match": true , "host": "71.95.206.106" } + +# failJSON: { "time": "2014-06-02T09:54:58", "match": true , "host": "151.1.71.144" } +