ACZoom  ·  Archive-2016

I was trying to get blockhosts working with OpenSuSE 13.1, and wasn't finding anything in syslog (even though I am getting multiple sshd connection attempts).
This is due to the fact that the timestamp format has changed.

In the LOG_PREFIX section of blockhosts.py, there's a line that says:

r'\w\w\w .?\d \d\d:\d\d:\d\d ' # time stamp Mmm dd hh:mm:ss

OpenSuSE 13.1 seems to have the syslog line in the following format:

2014-09-17T08:58:02.045291+01:00 titan sshd[22386]: Invalid user recruit from 61.133.211.118

So I have commented out the regexp above and put the following in instead:

r'\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\d\.\d\d\d\d\d\d\+\d\d:\d\d '

Note the escaped "." and "+".
I hope this helps someone!

MrFlibble