X-Git-Url: http://ftp.carnet.hr/carnet-debian/scm?a=blobdiff_plain;ds=inline;f=etc%2Frules%2Fdropbear_rules.xml;fp=etc%2Frules%2Fdropbear_rules.xml;h=813dfd00a5621a03f96ff49c52e8a0658d103afb;hb=3f728675941dc69d4e544d3a880a56240a6e394a;hp=8609234b15982c7b705b877e368b14cab13a2f3e;hpb=927951d1c1ad45ba9e7325f07d996154a91c911b;p=ossec-hids.git
diff --git a/etc/rules/dropbear_rules.xml b/etc/rules/dropbear_rules.xml
old mode 100755
new mode 100644
index 8609234..813dfd0
--- a/etc/rules/dropbear_rules.xml
+++ b/etc/rules/dropbear_rules.xml
@@ -37,8 +37,15 @@
authentication_failed,
+
+ 51000
+ attempt for nonexistent user
+ Bad password attempt for non existent user.
+ authentication_failed,
+
+
- 51003
+ authentication_failed
dropbear brute force attempt.
authentication_failures,
@@ -78,6 +85,20 @@
User successfully logged in using a password.
authentication_success,
+
+
+ 51000
+ Pubkey auth succeeded
+ User successfully logged in using a public key.
+ authentication_success,
+
+
+
+ dropbear
+ 1002
+ Error listening: Address already in use
+ Dropbear cannot listen on port.
+