Bug#273433: [Logcheck-devel] Bug#273433: logcheck: odd behaviour with perdition rules

maks attems debian at sternwelten.at
Tue Sep 28 15:04:48 UTC 2004


tags 273433 pending
thanks


hey jamie, 

got a bit lost in the thread of this bug,
could you please confirm that the following rule works:


^\w{3} [ :0-9]{11} [._[:alnum:]-]+ perdition\[[0-9]+\]: Connect: [0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}->[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$

it's the same of the logcheck-database whithout the trailing space at the
end, it works for me on the messages you posted, therefor fixed in cvs.

final feedback would be great.
maks

ps adding docu regarding this trailing space as next step.






More information about the Logcheck-devel mailing list