fail2ban and timeregex... help needed !

Discussion in 'Installation/Configuration' started by Jerome_, Jul 25, 2011.

  1. Jerome_

    Jerome_ New Member

    Hello,

    I'm trying to user fail2ban with a specific program (heyu) but I can't get rid of the timeregex and timepattern, I'm still getting the error message below:

    Found a match for '07/03 23:53:05 rcva func RFdata : Type VISONIC ID 0xc9a9d2 Data 0x0c
    ' but no valid date/time found for '07/03 23:53:05 rcva func RFdata : Type VISONIC ID 0xc9a9d2 Data 0x0c

    In my .conf file I'm using the following:

    timeregex = \d{2}/\d{2} \d{2}:\d{2}:\d{2}

    timepattern = %%m/%%d %%H:%%M:%%S

    failregex = RFdata : Type VISONIC ID (?P<host>\S+) Data 0x0c\s*$

    Did I made something wrong the regex ?

    Any help would be greatly appreciated !

    Thanks.

    Jérôme.
     
  2. Mark_NL

    Mark_NL New Member

    Paste some lines of your logfile please.
     

Share This Page