daniell/parserfilter
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add ignore for Fssh_kex_protocol_error, as it has no ip information

Browse Source
This commit is contained in:
Daniel Lysfjord
2024-03-25 17:36:33 +01:00
parent 2f9024a47e
commit 689084d93e
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
lib/ssh_parser.pm
View File

@ -153,6 +153,8 @@ sub parser {
} elsif($string =~ m/Fssh_kex_exchange_identification/) {
$hostile = 0;
$reply = 'kex exchange identification problem';
} elsif($string =~ m/Fssh_kex_protocol_error: type/) {
$reply = 'kex protocol error (no ip information)';
} elsif($string =~ m/fatal: Timeout before authentication for $re_host port [0-9]{1,6}/) {
$_ = $string;
$hostile = 1;
@ -177,6 +179,10 @@ sub parser {
m/from\ ($re_host)$/gcix && do {
$host = $1;
};
} elsif($string =~ m/reverse mapping checking getaddrinfo for/) {
$reply = 'Reverse check failed';
} elsif($string =~ m/but this does not map back to the address/) {
$reply = 'Reverse map failure';
} else {
$reply = 'No match for '.$string;
}