<p dir="ltr">For the same reason the ipv6 address is enclosed in square brackets. Is that not the case?</p>
<div class="gmail_quote">On Oct 31, 2014 4:24 PM, "Evan Rempel" <<a href="mailto:erempel@uvic.ca">erempel@uvic.ca</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">There are a number of occurrences in log lines that are of the form {address}:{port}<br>
<br>
This is fine for IPv4 addresses <a href="http://127.0.0.1:123" target="_blank">127.0.0.1:123</a> which can be matched with @IPv4@:@NUMBER@<br>
<br>
If the address is a complete IPv6 address with port 2607:f8f0:c10:fff:200:5efe:ce57:5330:123 the<br>
same pattern can be used to match it @IPvAny@:@NUMBER@<br>
<br>
If the IP address is a shortform IPv6 address such as ::ffff:127.0.0.1 and adding the port number<br>
::ffff:<a href="http://127.0.0.1:123" target="_blank">127.0.0.1:123</a> this fails to be matched by @IPvAny@:@NUMBER@<br>
<br>
Has anyone else seen bumped into this issue?<br>
<br>
For anyone taking a stab at this, this page looks interesting<br>
<br>
<a href="http://rosettacode.org/wiki/Parse_an_IP_Address" target="_blank">http://rosettacode.org/wiki/Parse_an_IP_Address</a><br>
<br>
<br>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote></div>