Skip to content

* dovecot decoder fix#2106

Open
AdUser wants to merge 1 commit intoossec:masterfrom
AdUser:dovecot-decoder-fix
Open

* dovecot decoder fix#2106
AdUser wants to merge 1 commit intoossec:masterfrom
AdUser:dovecot-decoder-fix

Conversation

@AdUser
Copy link
Copy Markdown

@AdUser AdUser commented Nov 24, 2023

This patch fixes incorrect capture of "local ip" address in dovecot decoder. Example line from logs:

dovecot: imap-login: Login: user=<admin@example.com>, method=PLAIN, rip=1.2.3.4, lip=4.5.6.7, mpid=8303, session=<0d/WNNoKGMjAqDr9>

Old regex captures "4.5.6.7," (extra comma at end).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant