Bug#273433: [Logcheck-devel] Bug#273433: logcheck: odd behaviour with perdition rules

[maks attems]

On Sun, 26 Sep 2004, Jamie L. Penman-Smithson wrote:

> Hey maks :)
> 
> On Sun, 2004-09-26 at 16:08 +0200, maks attems wrote:
> > thanks for those rule, i'll incorporate them soon.
> > but wanted to quick answer your question.
> 
> I have a feeling the rules are already in the package.

;)
 
> 
> Well I tried:
..
try:
 
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ perdition\[[0-9]+\]: Connect:
 [0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}-
[0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}$

without any space at the end.
 
> It looks like logcheck doesn't handle spaces at the end of rules very
> well..?

yeah that's not documented, it stripes from logfile away before
processing them through egrep.
 
thanks for the feedback, happy to read on.

--
maks