diff --git a/lib/ssh_parser.pm b/lib/ssh_parser.pm index 6cef5db..1e93987 100644 --- a/lib/ssh_parser.pm +++ b/lib/ssh_parser.pm @@ -191,6 +191,14 @@ sub parser { m/from\ ($re_host)\ to\ ($re_host),\ pid/gcix && do { $host = $1; }; + } elsif($string =~ m/penalty\: exceeded LoginGraceTime/) { + $_ = $string; + $hostile = 1; + $reply = 'exceeded LoginGraceTime'; + PARSER: + m/drop\ connection\ \#([0-9]{1,9})\ from\ \[($re_host)\]:([0-9]{1,9})\ on\ \[($re_host)\]:([0-9]{1,9})\ penalty:\ exceeded\ LoginGraceTime/gcix && do { + $host = $2; + }; } else { $reply = 'No match for '.$string; }