Hello,
 
Sorry I have another question about special characters.
I hate the regular expressions :-)
I tried to write a regexp to match on apache logs containing special characters.
 
I have a problem to find the way to espace for example :
=
?
 
I tried a simple escape :
\?
\=
I tried also \\? \\\\?
 
I tried these actions :
 
# cat fail2ban-regex-test
8.8.8.8 - - [12/Apr/2013:03:05:20 +0200] "GET /components/com_jnews/includes/openflashchart/tmp-upload-images/sh.php?c_id=ZWNobygidDc0Mzk4MTIiKTs=
HTTP/1.1" 404 2396 "-" "-" "-"
 
# fail2ban-regex fail2ban-regex-test '<HOST> - - \[.*?\] ".*(\?c_id).*".*'
Running tests
=============
Use regex line : <HOST> - - \[.*?\] ".*(\?c_id).*".*
Use log file   : fail2ban-regex-test

Results
=======
Failregex
|- Regular expressions:
|  [1] <HOST> - - \[.*?\] ".*(\?c_id).*".*
|
`- Number of matches:
   [1] 0 match(es)
Ignoreregex
|- Regular expressions:
|
`- Number of matches:
Summary
=======
Sorry, no match
Look at the above section 'Running tests' which could contain important
information.
 
# fail2ban-regex fail2ban-regex-test '<HOST> - - \[.*?\] ".*(c_id\=).*".*'
Running tests
=============
Use regex line : <HOST> - - \[.*?\] ".*(c_id\=).*".*
Use log file   : fail2ban-regex-test

Results
=======
Failregex
|- Regular expressions:
|  [1] <HOST> - - \[.*?\] ".*(c_id\=).*".*
|
`- Number of matches:
   [1] 0 match(es)
Ignoreregex
|- Regular expressions:
|
`- Number of matches:
Summary
=======
Sorry, no match
Look at the above section 'Running tests' which could contain important
information.
#
 
Thanks a lot for your help.