cisco-vpn.diff
| plugins/pcre/ruleset/cisco-vpn.rules | ||
|---|---|---|
| 68 | 68 |
last |
| 69 | 69 | |
| 70 | 70 |
#LOG:Oct 29 19:18:20 vpn 1793 10/29/2003 19:18:20.190 SEV=3 AUTH/5 RPT=6 12.34.56.78 Authentication rejected: Reason = Invalid password handle = 66, server = Internal, user = gene.gomez, domain = <not specified> |
| 71 |
regex=([\d\.]+) Authentication rejected: Reason = (.+) handle = \d+, server = (\w+), user = (\S+), domain = (.+); \
|
|
| 71 |
regex=([\d\.]+) Authentication rejected: Reason = (.+) handle = \d+, server = (\S+), user = (\S+), domain = (.+); \
|
|
| 72 | 72 |
classification.text=VPN user authentication; \ |
| 73 | 73 |
classification.reference(0).origin=vendor-specific; \ |
| 74 | 74 |
classification.reference(0).meaning=vpn_id; \ |