/etc/aminer/conf-available/generic/SsmtpParsingModel.py is in logdata-anomaly-miner 0.0.7-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 | from aminer.parsing import DecimalIntegerValueModelElement
from aminer.parsing import DelimitedDataModelElement
from aminer.parsing import FirstMatchModelElement
from aminer.parsing import FixedDataModelElement
from aminer.parsing import SequenceModelElement
def getModel():
typeChildren=[]
typeChildren.append(SequenceModelElement('sent', [
FixedDataModelElement('s0', 'Sent mail for '),
DelimitedDataModelElement('to-addr', ' ('),
FixedDataModelElement('s1', ' ('),
DelimitedDataModelElement('status', ') uid='),
FixedDataModelElement('s2', ') uid='),
DecimalIntegerValueModelElement('uid'),
FixedDataModelElement('s3', ' username='),
DelimitedDataModelElement('username', ' outbytes='),
FixedDataModelElement('s4', ' outbytes='),
DecimalIntegerValueModelElement('bytes'),
]))
model=SequenceModelElement('ssmtp', [
FixedDataModelElement('sname', 'sSMTP['),
DecimalIntegerValueModelElement('pid'),
FixedDataModelElement('s0', ']: '),
FirstMatchModelElement('msg', typeChildren)])
return(model)
|