###
###	Apache httpd messages
### $Id: apache.txt,v 1.1 2002/03/09 18:26:23 emf Exp $
###

'favicon.ico' - - - 0 ignore

'.* httpd\[.* \[error\] \[client (.*)\] File does not exist: .*scripts/root.exe' - - - 0 
	open "$2" - 5000 86400 86400
        report "/usr/local/bin/surfmailer -r root -S \"security incident from $2 \(nimda attempt\)\"" "$2" 

'.* httpd\[.* \[error\] \[client (.*)\] File does not exist: (.*)' - - - 0 
	open "$2" - 5000 3600 300
        report "/usr/local/bin/surfmailer -r root -S \"security incident from $2 \(webserver\)\"" "$2" 

'.* httpd\[.* \[error\] \[client (.*)\] Invalid URI in request GET x HTTP/1.0' - - - 0 
	open "$2" - 5000 3600 300
        report "/usr/local/bin/surfmailer -r root -S \"security incident from $2 \(sadmind worm scan\)\"" "$2" 

'.* httpd\[.* \[error\] \[client (.*)\] Invalid URI in request (.*)' - - - 0 
	open "$2" - 5000 3600 300
        report "/usr/local/bin/surfmailer -r root -S \"security incident from $2 \(webserver\)\"" "$2" 

'.* httpd\[.* \[error\] \[client (.*)\] Client sent malformed Host header' - - - 0 
	open "$2" - 5000 3600 300
        report "/usr/local/bin/surfmailer -r root -S \"security incident from $2 \(webserver\)\"" "$2" 

'.* httpd\[.* \[error\] \[client (.*)\] script not found or unable to stat: (.*)' - - - 0 
	open "$2" - 5000 3600 300
        report "/usr/local/bin/surfmailer -r root -S \"security incident from $2 \(webserver\)\"" "$2" 

'.* httpd\[.* \[error\] \[client (.*)\] user (.*): authentication failure for \"(.*)\": password mismatch' - - - 0 
	open "$2" - 5000 3600 300
        report "/usr/local/bin/surfmailer -r root -S \"security incident from $2 \(webserver login failure\)\"" "$2"