projects
/
ossec-hids.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
Imported Upstream version 2.7
[ossec-hids.git]
/
etc
/
rules
/
apache_rules.xml
diff --git
a/etc/rules/apache_rules.xml
b/etc/rules/apache_rules.xml
index
f823886
..
425c0b9
100755
(executable)
--- a/
etc/rules/apache_rules.xml
+++ b/
etc/rules/apache_rules.xml
@@
-1,4
+1,5
@@
-<!-- @(#) $Id$
+<!-- @(#) $Id: ./etc/rules/apache_rules.xml, 2011/09/08 dcid Exp $
+
- Official Apache rules for OSSEC.
-
- Copyright (C) 2009 Trend Micro Inc.
- Official Apache rules for OSSEC.
-
- Copyright (C) 2009 Trend Micro Inc.
@@
-79,7
+80,7
@@
<rule id="30109" level="9">
<if_sid>30101</if_sid>
<rule id="30109" level="9">
<if_sid>30101</if_sid>
- <regex>user \S+ not found</regex>
+ <regex>user \S+ not found|user \S+ in realm \.* not found</regex>
<description>Attempt to login using a non-existent user.</description>
<group>invalid_login,</group>
</rule>
<description>Attempt to login using a non-existent user.</description>
<group>invalid_login,</group>
</rule>