[Logcheck-commits] Hanspeter Kunz: i.d.s/dovecot: ignore "Too many invalid IMAP commands"

[Gerfried Fuchs]

Module: logcheck
Branch: lenny-backports
Commit: cf32b4d35cb71855bf0867960abf5decfe75b9d5
URL:    http://git.debian.org/?p=logcheck/logcheck.git;a=commit;h=cf32b4d35cb71855bf0867960abf5decfe75b9d5

Author: Hanspeter Kunz <hp at edelkunz.ch>
Date:   Sat Apr  3 13:13:31 2010 +0200

i.d.s/dovecot: ignore "Too many invalid IMAP commands"

---

 debian/changelog                        |    3 ++-
 rulefiles/linux/ignore.d.server/dovecot |    2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index 059bc5c..64d471a 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -34,11 +34,12 @@ logcheck (1.3.8) UNRELEASED; urgency=low
     - ignore discarded vacation responses (bulk, auto-submited, duplicates)
     - ignore duplicate forwards
     - ignore more "Connection closed" messages
+    - ignore "Too many invalid IMAP commands"
   * ignore.d.server/postfix:
     - ignore disconnects during EHLO (and not only HELO) handshakes
     - merged 5 similar "lost connection" rules into one
 
- -- Hanspeter Kunz <hp at edelkunz.ch>  Sat, 03 Apr 2010 13:04:17 +0200
+ -- Hanspeter Kunz <hp at edelkunz.ch>  Sat, 03 Apr 2010 13:12:24 +0200
 
 logcheck (1.3.7) unstable; urgency=low
 
diff --git a/rulefiles/linux/ignore.d.server/dovecot b/rulefiles/linux/ignore.d.server/dovecot
index 7fc11d0..cae4bca 100644
--- a/rulefiles/linux/ignore.d.server/dovecot
+++ b/rulefiles/linux/ignore.d.server/dovecot
@@ -13,7 +13,7 @@
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: (pop3|imap)-login: Disconnected: Logged out$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: (pop3|imap)-login: Login: user=<[-_.@[:alnum:]]+>, method=[[:alnum:]-]+, rip=[.:[:xdigit:]]+, lip=[.:[:xdigit:]]+(, (TLS( handshake)?|secured))?$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: IMAP\([-_.@[:alnum:]]+\): Connection closed(: Connection reset by peer| bytes=[[:digit:]]+/[[:digit:]]+)?$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: IMAP\([-_.@[:alnum:]]+\): Disconnected(: Logged out| for inactivity|: Disconnected| in [[:upper:]]+)?( bytes=[[:digit:]]+/[[:digit:]]+)?$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: IMAP\([-_.@[:alnum:]]+\): Disconnected(: Logged out| for inactivity|: Disconnected| in [[:upper:]]+|: Too many invalid IMAP commands\.)?( bytes=[[:digit:]]+/[[:digit:]]+)?$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: IMAP\([-_.@[:alnum:]]+\): Fixed index file /[-._/[:alnum:]&]+/dovecot\.index: first_(recent|unseen)_uid_lowwater [[:digit:]]+ -> [[:digit:]]+$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: POP3\([-_.@[:alnum:]]+\): Disconnected(: Logged out| for inactivity|: Disconnected)? top=[[:digit:]]+/[[:digit:]]+, retr=[[:digit:]]+/[[:digit:]]+, del=[[:digit:]]+/[[:digit:]]+, size=[[:digit:]]+$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: auth-worker\([-_.[:alnum:]]+\): (pg|my)sql: Connected to [-_.[:alnum:]]+ \([-_.[:alnum:]]+\)$