Package: logcheck-database
Version: 1.2.61
Severity: wishlist
Hello, I'm not sure how I managed to not submit this with my previous
rsync bug. Current rsync (2.6.9) has the following:
Sep 18 18:30:02 shemp rsync[8587]: connect from localhost (127.0.0.1)
Sep 18 18:30:02 shemp rsyncd[8587]: connect from localhost (127.0.0.1)
Sep 18 18:30:02 shemp rsyncd[8587]: rsync to PATHNAME from [EMAIL PROTECTED]
(127.0.0.1)
So the following differences remain between debian's logcheck rules
for rsync and my own.
1,2c1,2
< ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsync(d?)\[[0-9]+\]: connect from
[^[:space:]]+ \([0-9.]{7,15}\)$
< ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsyncd\[[0-9]+\]: rsync (to|on)
[[:alnum:]/._-]+ from [EMAIL PROTECTED]:alnum:]-]+ \([0-9.]{7,15}\)$
---
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsync\[[0-9]+\]: connect from [0-9.]{7,15}
> \([0-9.]{7,15}\)$
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsyncd\[[0-9]+\]: rsync on
> [[:alnum:]/._-]+ from [._[:alnum:]-]+ \([0-9.]{7,15}\)$
_______________________________________________
Logcheck-devel mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel
