On Wed, 12 Sep 2007, Dan Denton wrote: > After some research and messing around, I'm reasonable sure the problem is > with the regex.
Based on the log snippet you included in your mail, I think the regex you want is: .* vsftpd.* authentication failure.* rhost=(?P<host>\S+) Rene's regex is also looking for the ' user=' information, which you don't appear to be logging. -- D ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Denyhosts-user mailing list Denyhosts-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/denyhosts-user