new upstream release (3.3.0); modify package compatibility for Stretch

[ossec-hids.git] / contrib / ossec-testing / tests / dropbear.ini

diff --git a/contrib/ossec-testing/tests/dropbear.ini b/contrib/ossec-testing/tests/dropbear.ini
new file mode 100644 (file)
index 0000000..b48008f
--- /dev/null
+++ b/contrib/ossec-testing/tests/dropbear.ini
@@ -0,0 +1,7 @@
+[already listening]
+log 1 pass = Jun 25 14:04:30 10.0.0.1 dropbear[30746]: Failed listening on '7001': Error listening: Address already in use
+
+rule = 51011
+alert = 1
+decoder = dropbear
+