On Mon, 6 Jan 2003, Simon Wilson wrote: > OK I give up, someone please tell me what the syntax is to get logcheck > to ignore these lines: > > Dec 29 11:32:01 ns1 in.qpopper[6069]: (v?) POP login by user "nick" at > (***.***.***.**) ***.***.***.** > > And it goes in logcheck.ignore right? >
in.qpopper.*POP login by user "nick" should work and yes it goes in logcheck.ignore Gerald -- http://frontstreetnetworks.com | http://raqware.com Front Street Networks LLC | Phone: +1 203-785-0699 229 Front Street, Ste. C, New Haven, CT. 06513-3203 _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security
