search

ossec / ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
http://www.ossec.net
Other
4.33k stars 1.02k forks source link

* dovecot decoder fix #2106

Open AdUser opened 7 months ago

AdUser commented 7 months ago

This patch fixes incorrect capture of "local ip" address in dovecot decoder. Example line from logs:

dovecot: imap-login: Login: user=<admin@example.com>, method=PLAIN, rip=1.2.3.4, lip=4.5.6.7, mpid=8303, session=<0d/WNNoKGMjAqDr9>

Old regex captures "4.5.6.7," (extra comma at end).