<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
I had similar RE issues with hobbit-alerts.cfg. I reported it several
times but never got any response.<br>
<br>
-Charles<br>
<br>
Steve Holmes wrote:
<blockquote
cite="mid:43be87180705181328n6783ac82p8e7df1d2a1f40b22@mail.gmail.com"
type="cite">I have been having similar problem. RE which pcretest says
will work don't. I've tried with and without quotes, etc. <br>
I believe that the RE processing within hobbit is buggy. I haven't had
time to track down where that is handled in the code, but would like to
look at it if I can find it (hint, if you know where to look let me
know). I'm assuming that hobbit is munging the RE before handing it off
to PCRE. If not why would pcretest pass the RE and then it not work
within hobbit.
<br>
<br>
Steve Holmes<br>
<br>
<div><span class="gmail_quote">On 5/18/07, <b
class="gmail_sendername">Sean Hennessey</b> <<a
moz-do-not-send="true"
href="mailto:sean.hennessey1@verizonbusiness.com">sean.hennessey1@verizonbusiness.com</a>>
wrote:
</span>
<blockquote class="gmail_quote"
style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Looking
at your original regex in pcretest, it should have worked.<br>
<br>
PCRE version 4.5 01-December-2003<br>
<br>
re> /plugin create statement from userPassword|plugin doing query/<br>
data> plugin create statement from userPassword<br>
0: plugin create statement from userPassword<br>
data> pluging create statement from plugin
<br>
No match<br>
data> plugin doing query<br>
0: plugin doing query<br>
<br>
Did you wrap your regexp in "" in the file. They don't appear in your<br>
snippet below. I'm not sure if that is required or not.
<br>
<br>
-----Original Message-----<br>
From: Giovanni - Gestor Redix [mailto:<a moz-do-not-send="true"
href="mailto:giovanni@redix.com.br">giovanni@redix.com.br</a>]<br>
Sent: Friday, May 18, 2007 4:06 PM<br>
To: <a moz-do-not-send="true" href="mailto:hobbit@hswn.dk">hobbit@hswn.dk
</a><br>
Subject: Re: [hobbit] msgs - Multiple ignore patterns<br>
<br>
Didn't worked... :-(<br>
<br>
This syntax work for you ?<br>
<br>
Thank you!<br>
<br>
<br>
Sean Hennessey wrote:<br>
> I'd hazard a quess that what your regex is saying is
<br>
><br>
> Plugin create statement from [userPassword or plugin] doing query.
Try<br>
> putting () around the statements.<br>
><br>
> (Plugin create statement from userPassword)|(plugin doing query).
Not sure<br>
> if you need to escape the ()'s or not.<br>
><br>
> Sean<br>
><br>
> -----Original Message-----<br>
> From: Giovanni - Gestor Redix [mailto:<a moz-do-not-send="true"
href="mailto:giovanni@redix.com.br">giovanni@redix.com.br</a>
]<br>
> Sent: Friday, May 18, 2007 1:35 PM<br>
> To: <a moz-do-not-send="true" href="mailto:hobbit@hswn.dk">hobbit@hswn.dk</a><br>
> Subject: [hobbit] msgs - Multiple ignore patterns<br>
><br>
> Hi everyone,<br>
><br>
> I've applied the all-in-one patch but i still couldn't get
multiple
<br>
> patterns to work in IGNORE parameter... Here is my configuration:<br>
><br>
> LOG /var/log/syslog "%password|error|fail|changed|tcpd|Accepted"<br>
> COLOR=red IGNORE=%plugin create statement from userPassword|plugin
doing
<br>
> query SELECT<br>
> LOG /var/log/auth.log<br>
> "%password|error|fail|changed|tcpd|Accepted|jovial|tenebroso"
COLOR=red<br>
> IGNORE=%plugin create statement from userPassword|plugin doing
query<br>
SELECT<br>
><br>
> Why this regex don't work ? Any idea ?<br>
><br>
> Thank you all the attention...<br>
><br>
> Cheers<br>
><br>
><br>
<br>
To unsubscribe from the hobbit list, send an e-mail to
<br>
<a moz-do-not-send="true" href="mailto:hobbit-unsubscribe@hswn.dk">hobbit-unsubscribe@hswn.dk</a><br>
<br>
<br>
<br>
<br>
<br>
To unsubscribe from the hobbit list, send an e-mail to<br>
<a moz-do-not-send="true" href="mailto:hobbit-unsubscribe@hswn.dk">hobbit-unsubscribe@hswn.dk
</a><br>
<br>
<br>
</blockquote>
</div>
<br>
<br clear="all">
<br>
-- <br>
Lots of people think they're charitable if they give away their old
clothes<br>
and things they don't want. It isn't charity to give away things you
want
<br>
to get rid of and it isn't a sacrifice to do things you don't mind
doing.<br>
-Myrtle Reed, author (1874-1911)
</blockquote>
<br>
</body>
</html>