Author Topic: see bad pass/username  (Read 9116 times)

0 Members and 1 Guest are viewing this topic.

Offline rejetto

  • Administrator
  • Insane programmer
  • *
  • Posts: 12814
  • Country: it
    • View Profile
Re: see bad pass/username
« Reply #15 on: March 16, 2009, 07:13:10 AM »
my solution may not be technically correct, but it works  :)

the solution is just that, to enter the NEWLINE yourself :)

but you have some inutility in your code, you should use this form

[unauthorized]
{.append|/A Location You Choose/Spl-Log.txt|Bad_Login: %date% %time% %ip% {.if|%user%|%user%|0.} %password%
.}


having the NEWLINE at the end will avoid to create a blank line if the file is initially empty.

Offline r][m

  • Insane poster
  • *****
  • Posts: 347
    • View Profile
Re: see bad pass/username
« Reply #16 on: March 16, 2009, 10:42:53 AM »
Rejetto
Thanks for the reply.
I've run into a problem with using the special log via event scripts.
The [download completed] records every thing, .gif, ~img, etc.
File mask, or don't log doesn't effect it.
I'm back to the request
Quote
Is there any hope that you might make a small (but badly needed) change to the regular log?
Regular log would work if:
3/16/09 3:14:25 AM user@192.168.1.35:1657 Requested GET /Server/
Could be out put as this with a space on each side of @
3/16/09 3:14:25 AM user @ 192.168.1.35:1657 Requested GET /Server/
But there would have to be a place holder when no user like apache
3/16/09 3:14:29 AM - 192.168.1.35:1658 Requested GET /Main/
Could this be done?


Offline rejetto

  • Administrator
  • Insane programmer
  • *
  • Posts: 12814
  • Country: it
    • View Profile
Re: see bad pass/username
« Reply #17 on: March 17, 2009, 07:15:32 AM »
i do not really like it, because actually the space can be used in the /path/to/file
won't this cause a problem?
my idea is that i could fire on the file TABS instead of spaces. this would solve the problem of having spaces inside data.
even with no user, the tab would be present, so there's no need for the "-" as place holder.
next version will use this format (only on disk, on video it will stay the same).
i don't like the idea of changing the format. someone may be relying on the current format to analyze the data :-\
but i understand the importance of using a generic tool to parse the data.
we'll see if anyone complaints.
in case, it will be an option.

the [download completed] problem is discussed on the other topic.
« Last Edit: March 17, 2009, 07:17:51 AM by rejetto »

Offline r][m

  • Insane poster
  • *****
  • Posts: 347
    • View Profile
Re: see bad pass/username
« Reply #18 on: March 17, 2009, 11:44:30 AM »
Quote
do not really like it, because actually the space can be used in the /path/to/file
won't this cause a problem?
Do you mean
3/17/09 11:58:26 AM user@192.168.1.35:1104 Requested GET /Server/Shared_Files/Last Value In Range.doc
the spaces as marked in blue ? No. The significant log info is, Date, Time, User, and IP.
Anything to the right of IP can be re-combined, but anything with no space (I at least)
can't seperate.
Quote
someone may be relying on the current format to analyze the data
If they are I wish they'd share the method. I see no way, with out seperating user and IP,
which is what apache does, 192.168.1.35 - user [17/Mar/2009:03:13:50 -0600]
I'm aware of TABS, but haven't used it.
We'll give it a try. Should work.
My purpose is to get away from apache log format, as I feel it was never intended to log the
info HFS can log. HFS is out growing apache log's design intent. There will soon come a point
where the log analyzer prog's just wont be able to read whats available.
It should be possible to use a database to show #1 download, #1 user, # visits by IP, etc.
even charts are a possibility.

Offline rejetto

  • Administrator
  • Insane programmer
  • *
  • Posts: 12814
  • Country: it
    • View Profile
Re: see bad pass/username
« Reply #19 on: March 17, 2009, 12:53:56 PM »
the new format is out

Offline Lebjo

  • Regular poster
  • **
  • Posts: 15
    • View Profile
Re: see bad pass/username
« Reply #20 on: May 08, 2010, 05:56:04 AM »
with 2.3 beta build #229 version - worked fine...
but now i wanna use this funckion with 2.3b 260... - and not working - why??

Offline rejetto

  • Administrator
  • Insane programmer
  • *
  • Posts: 12814
  • Country: it
    • View Profile
Re: see bad pass/username
« Reply #21 on: May 08, 2010, 08:54:32 AM »
please be more specific.
report what did you do that's not working.

Offline Lebjo

  • Regular poster
  • **
  • Posts: 15
    • View Profile
Re: see bad pass/username
« Reply #22 on: May 08, 2010, 10:19:20 AM »
when typing wrong password and name(to login window..) - in 'log' im not getting information about this...
« Last Edit: May 08, 2010, 10:25:37 AM by Lebjo »

Offline maverick

  • Insane poster
  • *****
  • Posts: 1052
  • Computer Solutions
    • View Profile
Re: see bad pass/username
« Reply #23 on: May 09, 2010, 12:50:05 AM »
when typing wrong password and name(to login window..) - in 'log' im not getting information about this...

You already got an answer to this:

http://www.rejetto.com/forum/index.php/topic,6719.msg1041472.html#msg1041472
« Last Edit: May 09, 2010, 10:10:50 AM by maverick »
maverick

Offline Lebjo

  • Regular poster
  • **
  • Posts: 15
    • View Profile
Re: see bad pass/username
« Reply #24 on: May 09, 2010, 12:05:28 PM »
You already got an answer to this:

http://www.rejetto.com/forum/index.php/topic,6719.msg1041472.html#msg1041472


ahhhh not working... maybe need some 'modification' or change some options?

Why i dont getting information like this

« Last Edit: May 09, 2010, 12:20:44 PM by Lebjo »

Offline maverick

  • Insane poster
  • *****
  • Posts: 1052
  • Computer Solutions
    • View Profile
Re: see bad pass/username
« Reply #25 on: May 09, 2010, 02:41:47 PM »
Lebjo

Works fine here.

Quote
02:30:33 PM Lebjo@127.0.0.1:1136 Bad login:  Name Used - Lebjo / Password Used - Libby
maverick

Offline Lebjo

  • Regular poster
  • **
  • Posts: 15
    • View Profile
Re: see bad pass/username
« Reply #26 on: May 10, 2010, 08:38:07 AM »
dam...
i instaled new fresh hfs version to my virtual windows - stil not working...
again:
maybe need change some settings?




2.3beta 260
« Last Edit: May 10, 2010, 08:58:02 AM by Lebjo »

Offline r][m

  • Insane poster
  • *****
  • Posts: 347
    • View Profile
Re: see bad pass/username
« Reply #27 on: May 10, 2010, 09:03:15 AM »
dam...
i instaled new fresh version to my virtual windows - stil not working...
again:
maybe need change some settings?
Do you have something like this in hfs.events file?
Code: [Select]
[+unauthorized]
{.add to log | Bad Login: %user% %password%|red
.}
The "log what" setings don't seem to change anything here.

Offline rejetto

  • Administrator
  • Insane programmer
  • *
  • Posts: 12814
  • Country: it
    • View Profile
Re: see bad pass/username
« Reply #28 on: May 10, 2010, 10:27:10 AM »
this code
Code: [Select]
[+unauthorized]
{.append|/A Location You Choose/Spl-Log.txt|Bad_Login: %date% %time% %ip% {.if|%user%|%user%|0.} %password%
.}

must be put in the template, not events file.
so the best way is to right click on the root/home > properties > diff template

Offline Lebjo

  • Regular poster
  • **
  • Posts: 15
    • View Profile
Re: see bad pass/username
« Reply #29 on: May 10, 2010, 12:30:00 PM »
rejetto


With your code in Spl-Log.txt file i having 1 empty (with no pass ir no name) line.. why?



one more question
is possible to do this function
if user type bad password/username..  - he anyway  can go to that 'folder'
i need just 1 'pop up' login window.
« Last Edit: May 10, 2010, 01:06:19 PM by Lebjo »