regardless:

$> ./fail2ban-regex "[Aug 13 21:28:48] NOTICE[15119] chan_sip.c: Call from '' 
(198.15.80.99:5081) to extension '011972599724974' rejected because extension 
not found in context 'default'." config/filter.d/asterisk.conf 
                                      
Running tests
=============

Use   failregex file : config/filter.d/asterisk.conf
Use      single line : [Aug 13 21:28:48] NOTICE[15119] chan_sip.c: Call f...


Results
=======

Failregex: 1 total
|-  #) [# of hits] regular expression
|   8) [1] ^\[\]\s*(?:NOTICE|SECURITY)(?:\[\d+\]):?(?:\[\S+\d*\])? \S+:\d* Call 
from '[^']*' \(<HOST>:\d+\) to extension '\d+' rejected because extension not 
found in context 'default'\.$
`-

Ignoreregex: 0 total

Date template hits:
|- [# of hits] date format
|  [1] MONTH Day Hour:Minute:Second
`-

Lines: 1 lines, 0 ignored, 1 matched, 0 missed


and I invite you to

git clone git://github.com/fail2ban/fail2ban
cd fail2ban
./fail2ban-regex "[Aug 13 21:28:48] NOTICE[15119] chan_sip.c: Call from '' 
(198.15.80.99:5081) to extension '011972599724974' rejected because extension 
not found in context 'default'." config/filter.d/asterisk.conf

yourself happen you want to check more lines ;)

Cheers

On Wed, 14 Aug 2013, Marc F. Clemente wrote:

> Maybe I need to look more carefully when I type.  The error in the
> log file that I get is this:


> [Aug 13 21:28:48] NOTICE[15119] chan_sip.c: Call from ''
> (198.15.80.99:5081) to extension '011972599724974' rejected because
> extension not found in context 'default'.

> The registration failed is caught.

> Marc


-- 
Yaroslav O. Halchenko, Ph.D.
http://neuro.debian.net http://www.pymvpa.org http://www.fail2ban.org
Senior Research Associate,     Psychological and Brain Sciences Dept.
Dartmouth College, 419 Moore Hall, Hinman Box 6207, Hanover, NH 03755
Phone: +1 (603) 646-9834                       Fax: +1 (603) 646-1419
WWW:   http://www.linkedin.com/in/yarik        


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to