{"action":"created","issue":{"url":"https://api.github.com/repos/jvinet/knock/issues/13","repository_url":"https://api.github.com/repos/jvinet/knock","labels_url":"https://api.github.com/repos/jvinet/knock/issues/13/labels{/name}","comments_url":"https://api.github.com/repos/jvinet/knock/issues/13/comments","events_url":"https://api.github.com/repos/jvinet/knock/issues/13/events","html_url":"https://github.com/jvinet/knock/issues/13","id":48516205,"number":13,"title":"Matching similar squences seems limited","user":{"login":"jalbstmeijer","id":362000,"avatar_url":"https://avatars.githubusercontent.com/u/362000?v=3","gravatar_id":"","url":"https://api.github.com/users/jalbstmeijer","html_url":"https://github.com/jalbstmeijer","followers_url":"https://api.github.com/users/jalbstmeijer/followers","following_url":"https://api.github.com/users/jalbstmeijer/following{/other_user}","gists_url":"https://api.github.com/users/jalbstmeijer/gists{/gist_id}","starred_url":"https://api.github.com/users/jalbstmeijer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jalbstmeijer/subscriptions","organizations_url":"https://api.github.com/users/jalbstmeijer/orgs","repos_url":"https://api.github.com/users/jalbstmeijer/repos","events_url":"https://api.github.com/users/jalbstmeijer/events{/privacy}","received_events_url":"https://api.github.com/users/jalbstmeijer/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/jvinet/knock/labels/needs-verification","name":"needs-verification","color":"d4c5f9"}],"state":"open","locked":false,"assignee":{"login":"jvinet","id":84075,"avatar_url":"https://avatars.githubusercontent.com/u/84075?v=3","gravatar_id":"","url":"https://api.github.com/users/jvinet","html_url":"https://github.com/jvinet","followers_url":"https://api.github.com/users/jvinet/followers","following_url":"https://api.github.com/users/jvinet/following{/other_user}","gists_url":"https://api.github.com/users/jvinet/gists{/gist_id}","starred_url":"https://api.github.com/users/jvinet/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jvinet/subscriptions","organizations_url":"https://api.github.com/users/jvinet/orgs","repos_url":"https://api.github.com/users/jvinet/repos","events_url":"https://api.github.com/users/jvinet/events{/privacy}","received_events_url":"https://api.github.com/users/jvinet/received_events","type":"User","site_admin":false},"milestone":null,"comments":7,"created_at":"2014-11-12T14:34:15Z","updated_at":"2016-03-01T03:40:49Z","closed_at":null,"body":"Hi,\r\n\r\nIt seems that matching sequences is very linear and will not match when sequences start in a similar way.\r\n\r\nIs this a feature or bug?\r\n\r\nGr, J\r\n\r\nwith the following config:\r\n\r\n[sequence1]\r\n\tsequence      = 2001,2002,2003,2011\r\n        seq_timeout   = 15\r\n        tcpflags      = syn\r\n\tstart_command = date\r\n\r\n[sequence2]\r\n        sequence      = 2001,2002,2003,2012\r\n        seq_timeout   = 15\r\n        tcpflags      = syn\r\n        start_command = date\r\n\r\n[sequence3]\r\n        sequence      = 2001,2002,2003,2013\r\n        seq_timeout   = 15\r\n        tcpflags      = syn\r\n        start_command = date\r\n\r\n[sequence4]\r\n        sequence      = 2001,2002,2003,2014\r\n        seq_timeout   = 15\r\n        tcpflags      = syn\r\n        start_command = date\r\n\r\nand the following actions:\r\n\r\nknock -d5 123.123.123.123 2001 2002 2003 2011\r\nknock -d5 123.123.123.123 2001 2002 2003 2012\r\nknock -d5 123.123.123.123 2001 2002 2003 2013\r\nknock -d5 123.123.123.123 2001 2002 2003 2014\r\n\r\nI see:\r\n\r\n[2014-11-12 15:26] 54.72.48.222: sequence1: Stage 1\r\n[2014-11-12 15:26] 54.72.48.222: sequence2: Stage 1\r\n[2014-11-12 15:26] 54.72.48.222: sequence3: Stage 1\r\n[2014-11-12 15:26] 54.72.48.222: sequence4: Stage 1\r\n[2014-11-12 15:26] 54.72.48.222: sequence1: Stage 2\r\n[2014-11-12 15:26] 54.72.48.222: sequence1: Stage 3\r\n[2014-11-12 15:26] 54.72.48.222: sequence1: Stage 4\r\n[2014-11-12 15:26] 54.72.48.222: sequence1: OPEN SESAME\r\n[2014-11-12 15:26] sequence1: running command: date\r\n\r\n[2014-11-12 15:26] 54.72.48.222: sequence1: Stage 1\r\n[2014-11-12 15:26] 54.72.48.222: sequence2: Stage 1\r\n[2014-11-12 15:26] 54.72.48.222: sequence3: Stage 1\r\n[2014-11-12 15:26] 54.72.48.222: sequence4: Stage 1\r\n[2014-11-12 15:26] 54.72.48.222: sequence1: Stage 2\r\n[2014-11-12 15:26] 54.72.48.222: sequence1: Stage 3\r\n\r\n[2014-11-12 15:26] 54.72.48.222: sequence1: Stage 1\r\n[2014-11-12 15:26] 54.72.48.222: sequence2: Stage 1\r\n[2014-11-12 15:26] 54.72.48.222: sequence3: Stage 1\r\n[2014-11-12 15:26] 54.72.48.222: sequence4: Stage 1\r\n[2014-11-12 15:26] 54.72.48.222: sequence1: Stage 2\r\n[2014-11-12 15:26] 54.72.48.222: sequence1: Stage 3\r\n\r\n[2014-11-12 15:26] 54.72.48.222: sequence1: Stage 1\r\n[2014-11-12 15:26] 54.72.48.222: sequence2: Stage 1\r\n[2014-11-12 15:26] 54.72.48.222: sequence3: Stage 1\r\n[2014-11-12 15:26] 54.72.48.222: sequence4: Stage 1\r\n[2014-11-12 15:26] 54.72.48.222: sequence1: Stage 2\r\n[2014-11-12 15:26] 54.72.48.222: sequence1: Stage 3\r\n"},"comment":{"url":"https://api.github.com/repos/jvinet/knock/issues/comments/190526196","html_url":"https://github.com/jvinet/knock/issues/13#issuecomment-190526196","issue_url":"https://api.github.com/repos/jvinet/knock/issues/13","id":190526196,"user":{"login":"airwoflgh","id":8410932,"avatar_url":"https://avatars.githubusercontent.com/u/8410932?v=3","gravatar_id":"","url":"https://api.github.com/users/airwoflgh","html_url":"https://github.com/airwoflgh","followers_url":"https://api.github.com/users/airwoflgh/followers","following_url":"https://api.github.com/users/airwoflgh/following{/other_user}","gists_url":"https://api.github.com/users/airwoflgh/gists{/gist_id}","starred_url":"https://api.github.com/users/airwoflgh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/airwoflgh/subscriptions","organizations_url":"https://api.github.com/users/airwoflgh/orgs","repos_url":"https://api.github.com/users/airwoflgh/repos","events_url":"https://api.github.com/users/airwoflgh/events{/privacy}","received_events_url":"https://api.github.com/users/airwoflgh/received_events","type":"User","site_admin":false},"created_at":"2016-03-01T03:40:49Z","updated_at":"2016-03-01T03:40:49Z","body":"Hi Judd,\r\n\r\nCan we close this one out now please?\r\n\r\nP."}}