From 6a5f10ee72eed02fb8aa66af6beb4c7e57fc6c97 Mon Sep 17 00:00:00 2001 From: Simon Brown Date: Tue, 27 Oct 2015 16:27:14 -0700 Subject: [PATCH] name change & new sample data changed name to match daemon, log samples with year --- fail2ban/tests/files/logs/screenshare | 14 -------------- fail2ban/tests/files/logs/screenshared | 18 ++++++++++++++++++ 2 files changed, 18 insertions(+), 14 deletions(-) delete mode 100644 fail2ban/tests/files/logs/screenshare create mode 100644 fail2ban/tests/files/logs/screenshared diff --git a/fail2ban/tests/files/logs/screenshare b/fail2ban/tests/files/logs/screenshare deleted file mode 100644 index 73425b43..00000000 --- a/fail2ban/tests/files/logs/screenshare +++ /dev/null @@ -1,14 +0,0 @@ -# failJSON: { "time": "Oct 27 09:24:46", "match": false , "host": "192.168.5.247" } -Oct 27 09:24:46 test1.beezwax.net screensharingd[1170]: Authentication: SUCCEEDED :: User Name: simon :: Viewer Address: 192.168.5.247 :: Type: DH -# failJSON: { "time": "Oct 27 09:25:41", "match": true , "host": "192.168.5.247" } -Oct 27 09:25:41 test1.beezwax.net screensharingd[1170]: Authentication: FAILED :: User Name: sdfsdfs () mro :: Viewer Address: 192.168.5.247 :: Type: DH -# failJSON: { "time": "Oct 27 09:25:49", "match": true , "host": "192.168.5.247" } -Oct 27 09:25:49 test1.beezwax.net screensharingd[1170]: Authentication: FAILED :: User Name: sdfsdfs :: :: Viewer Address: 192.168.5.247 :: Type: DH -# failJSON: { "time": "Oct 27 09:26:09", "match": true , "host": "192.168.5.247" } -Oct 27 09:26:09 test1.beezwax.net screensharingd[1170]: Authentication: FAILED :: User Name: sdfsdfs @! s:: :: Viewer Address: 192.168.5.247 :: Type: DH -# failJSON: { "time": "Oct 27 09:23:20", "match": false , "host": "192.168.5.247" } -Oct 27 09:23:20 fm100 com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.pid.SecurityAgent.1156): Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedServiceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAgent.xpc -# failJSON: { "time": "Oct 27 09:23:20", "match": false , "host": "192.168.5.247" } -Oct 27 09:23:20 fm100.beezwax.net ManagedClient[1155]: MCXCCacheMCXRecordAndGraph(): vproc_swap_integer(NULL, VPROC_GSK_PERUSER_SUSPEND, &(uid=1027), NULL) failed -# failJSON: { "time": "Oct 27 12:26:44", "match": false , "host": "192.168.5.247" } -Oct 27 12:26:44 fm100.beezwax.net digest-service[3828]: digest-request: kdc failed with 36150275 proto=unknown diff --git a/fail2ban/tests/files/logs/screenshared b/fail2ban/tests/files/logs/screenshared new file mode 100644 index 00000000..63e1dfb4 --- /dev/null +++ b/fail2ban/tests/files/logs/screenshared @@ -0,0 +1,18 @@ +# NOTE: dates here include years -- this is NOT the typical configuration for the system.log +# file on Mac OS. However, matches will not pass unless year is included. +# +# failJSON: { "match": false } +Oct 27 2015 09:24:46 test1.beezwax.net screensharingd[1170]: Authentication: SUCCEEDED :: User Name: simon :: Viewer Address: 192.168.5.247 :: Type: DH +# failJSON: { "match": false } +Oct 27 2015 09:23:20 test1 com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.pid.SecurityAgent.1156): Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedServiceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAgent.xpc +# failJSON: { "match": false } +Oct 27 2015 09:23:20 test1.beezwax.net ManagedClient[1155]: MCXCCacheMCXRecordAndGraph(): vproc_swap_integer(NULL, VPROC_GSK_PERUSER_SUSPEND, &(uid=1027), NULL) failed +# failJSON: { "match": false } +Oct 27 2015 12:26:44 test1.beezwax.net digest-service[3828]: digest-request: kdc failed with 36150275 proto=unknown +# +# failJSON: { "time": "2015-10-27T12:35:40", "match": true , "host": "192.168.5.247" } +Oct 27 2015 12:35:40 test1.beezwax.net screensharingd[1170]: Authentication: FAILED :: User Name: sdfsdfs () mro :: Viewer Address: 192.168.5.247 :: Type: DH +# failJSON: { "time": "2015-10-27T12:35:50", "match": true , "host": "192.168.5.247" } +Oct 27 2015 12:35:50 test1.beezwax.net screensharingd[1170]: Authentication: FAILED :: User Name: brown_s :: :: Viewer Address: 192.168.5.247 :: Type: DH +# failJSON: { "time": "2015-10-27T12:26:01", "match": true , "host": "192.168.5.247" } +Oct 27 2015 12:26:01 test1.beezwax.net screensharingd[1170]: Authentication: FAILED :: User Name: brown @! s:: :: Viewer Address: 192.168.5.247 :: Type: DH