| |
|---|
| | |
|---|
| | |
|---|
| | ########## |
|---|
| | |
|---|
| | VERSION = "$Id: abck,v 2.1 2002/09/04 21:14:48 tundra Exp $" |
|---|
| | VERSION = "$Id: abck,v 2.2 2002/09/04 21:24:27 tundra Exp $" |
|---|
| | |
|---|
| | |
|---|
| | |
|---|
| | #################### |
|---|
| |
|---|
| | # the user does not want matched. |
|---|
| | |
|---|
| | if NOMATCH and logrecord.count(NOMATCH): |
|---|
| | break |
|---|
| | |
|---|
| | if SHOWONLY: |
|---|
| | print logrecord |
|---|
| | break |
|---|
| | |
|---|
| | # Different attack records put the hostquad in different places |
|---|
| | hostquad = logfield[AttackKeys[attackkey]] |
|---|
| | if hostquad[-1] == ',': |
|---|
| |
|---|
| | if LISTIGNORED: |
|---|
| | print "Ignoring record on match for: [%s]\n%s" % (ihost, logrecord) |
|---|
| | |
|---|
| | raise IgnoreRecord |
|---|
| | |
|---|
| | |
|---|
| | if SHOWONLY: |
|---|
| | print logrecord |
|---|
| | break |
|---|
| | |
|---|
| | |
|---|
| | # Check if we've seen this abuser before |
|---|
| | # i.e., Do we already know who to notify? |
|---|
| | |
|---|
| | if NameCache.has_key(hostname): |
|---|
| |
|---|
| | |
tundra
authored
on 4 Sep 2002