package logcheck-database
tags 328251 pending
thanks
On Fri, 2005-09-16 at 14:15 +0200, maximilian attems wrote:
> ----- Forwarded message from Reinhold Trocker <[EMAIL PROTECTED]> -----
> To: maximilian attems <[EMAIL PROTECTED]>
> Subject: Antwort: Re: [Logcheck-devel] Bug#328251: logcheck: please add rules
> for
> popa3d
> From: Reinhold Trocker <[EMAIL PROTECTED]>
> Date: Thu, 15 Sep 2005 17:23:31 +0200
>
> examples:
> Sep 15 17:02:23 lin popa3d[14561]: Session from 127.0.0.1
<snip>
> the exception is the following line:
> Authentication passed for <username>
>
> so the regex would be
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ popa3d\[[0-9]+\]: Authentication passed
> for [._[:alnum:]-]+$
>
> At least I think so: is the regex "[._[:alnum:]-]+" correct for
> usernames?
Yes, it would.
I've added the following rules, which will be included in the next
release:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ popa3d\[[0-9]+\]: Session from
[:0-9a-f.]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ popa3d\[[0-9]+\]: Authentication
passed for [._[:alnum:]-]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ popa3d\[[0-9]+\]: [0-9]+ message
\([0-9]+ bytes\) loaded$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ popa3d\[[0-9]+\]: [0-9]+ \([0-9]+\)
deleted, [0-9]+ \([0-9]+\) left$
Thanks,
--
-Jamie L. Penman-Smithson <[EMAIL PROTECTED]>
t: +44 1273 424795; f: +44 1273 424795
PGP: C0A7 955E EED6 A309 23D7 863B C76A 26A3 F0DC FCA8
never send mail to: [EMAIL PROTECTED]
signature.asc
Description: This is a digitally signed message part
