1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
|
# New tests should be added to this file if there is no specific
# reason for not doing that. Initially, we could only handle one test
# case per file, but this restriction has been removed some time ago.
# So it is less troublesome (and easier to overlook) to have all related
# tests in a single file.
# This file contains a lot of real-life samples (of course mangled so
# that they can not be traced back to the original submitter). Note
# that IP addr 192.0.2.1 is specifically set aside for testing and
# documentation by IANA.
# rgerhards, 2009-10-19
<29>Oct 16 20:47:24 example-p exam-pl[12345]: connect host= /192.0.2.1
29,daemon,notice,Oct 16 20:47:24,example-p,exam-pl,exam-pl[12345]:, connect host= /192.0.2.1
<175>Oct 16 23:47:31 #001 MSWinEventLog 0#011Security#01119023582#011Fri Oct 16 16:30:44 2009#011592#011Security#011rgabcde#011User#011Success Audit#011XSXSXSN01#011Detailed Tracking#011#0112572#01119013885
175,local5,debug,Oct 16 23:47:31,localhost,#001,#001, MSWinEventLog 0#011Security#01119023582#011Fri Oct 16 16:30:44 2009#011592#011Security#011rgabcde#011User#011Success Audit#011XSXSXSN01#011Detailed Tracking#011#0112572#01119013885
#
#175,local5,debug,Oct 16 23:47:31,127.0.0.1,#001,#001, MSWinEventLog 0#011Security#01119023582#011Fri Oct 16 16:30:44 2009#011592#011Security#011rgabcde#011User#011Success Audit#011XSXSXSN01#011Detailed Tracking#011#0112572#01119013885
|
