[Logcheck-commits] Hanspeter Kunz: i.d.s/dovecot: ignore more "Connection closed" messages
Hanspeter Kunz
hp-guest at alioth.debian.org
Sat Apr 3 11:12:57 UTC 2010
Module: logcheck
Branch: master
Commit: cd627c31c0b25fdda4ab640a2931a2e5b1064807
URL: http://git.debian.org/?p=logcheck/logcheck.git;a=commit;h=cd627c31c0b25fdda4ab640a2931a2e5b1064807
Author: Hanspeter Kunz <hp at edelkunz.ch>
Date: Sat Apr 3 12:58:59 2010 +0200
i.d.s/dovecot: ignore more "Connection closed" messages
---
debian/changelog | 3 ++-
rulefiles/linux/ignore.d.server/dovecot | 2 +-
2 files changed, 3 insertions(+), 2 deletions(-)
diff --git a/debian/changelog b/debian/changelog
index 0fd9998..f7a17a4 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -33,10 +33,11 @@ logcheck (1.3.8) UNRELEASED; urgency=low
- msgid's may contain colons
- ignore discarded vacation responses (bulk, auto-submited, duplicates)
- ignore duplicate forwards
+ - ignore more "Connection closed" messages
* ignore.d.server/postfix:
- ignore disconnects during EHLO (and not only HELO) handshakes
- -- Hanspeter Kunz <hp at edelkunz.ch> Sat, 03 Apr 2010 12:49:27 +0200
+ -- Hanspeter Kunz <hp at edelkunz.ch> Sat, 03 Apr 2010 12:57:23 +0200
logcheck (1.3.7) unstable; urgency=low
diff --git a/rulefiles/linux/ignore.d.server/dovecot b/rulefiles/linux/ignore.d.server/dovecot
index 5596448..7fc11d0 100644
--- a/rulefiles/linux/ignore.d.server/dovecot
+++ b/rulefiles/linux/ignore.d.server/dovecot
@@ -12,7 +12,7 @@
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: (pop3|imap)-login: Disconnected: ((Too many invalid commands|Inactivity): )?(user=<[-_.@[:alnum:]]+>, )?(method=[[:alnum:]-]+, )?rip=[.:[:xdigit:]]+, lip=[.:[:xdigit:]]+(, (TLS( handshake)?|secured))?$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: (pop3|imap)-login: Disconnected: Logged out$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: (pop3|imap)-login: Login: user=<[-_.@[:alnum:]]+>, method=[[:alnum:]-]+, rip=[.:[:xdigit:]]+, lip=[.:[:xdigit:]]+(, (TLS( handshake)?|secured))?$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: IMAP\([-_.@[:alnum:]]+\): Connection closed(: Connection reset by peer)?$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: IMAP\([-_.@[:alnum:]]+\): Connection closed(: Connection reset by peer| bytes=[[:digit:]]+/[[:digit:]]+)?$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: IMAP\([-_.@[:alnum:]]+\): Disconnected(: Logged out| for inactivity|: Disconnected| in [[:upper:]]+)?( bytes=[[:digit:]]+/[[:digit:]]+)?$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: IMAP\([-_.@[:alnum:]]+\): Fixed index file /[-._/[:alnum:]&]+/dovecot\.index: first_(recent|unseen)_uid_lowwater [[:digit:]]+ -> [[:digit:]]+$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: POP3\([-_.@[:alnum:]]+\): Disconnected(: Logged out| for inactivity|: Disconnected)? top=[[:digit:]]+/[[:digit:]]+, retr=[[:digit:]]+/[[:digit:]]+, del=[[:digit:]]+/[[:digit:]]+, size=[[:digit:]]+$
More information about the Logcheck-commits
mailing list