[Logcheck-devel] Bug#325801: logcheck: new regex to filter imap "Moved xxx bytes of new mail" messages

[toby cabot]

Package: logcheck
Version: 1.2.41
Severity: wishlist

Hi folks, thanks for your work maintaining logcheck, it works well.

When my users read their mail using imap (usually via squirrelmail,
not sure about other clients) I get a message like this in the log:

Aug 22 21:03:32 phoenix imapd[6551]: Moved 11323 bytes of new mail to /home/winky/mail/mbox from /var/spool/mail/winky host= localhost [127.0.0.1]

It seems to me that this is a normal enough system event that it can
be filtered so I added a new regex to /etc/logcheck/ignore.d.server/imap:

imapd\[[._[:alnum:]-]+\]: Moved [0-9]+ bytes of new mail to [^[:space:]]+ from [^[:space:]]+ host= localhost \[127.0.0.1\]$

Thanks,
Toby

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.10-1-686-smp
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages logcheck depends on:
ii  adduser          3.67                    Add and remove users and groups
ii  cron             3.0pl1-91               management of regular background p
ii  debconf [debconf 1.4.58                  Debian configuration management sy
ii  debianutils      2.14.2                  Miscellaneous utilities specific t
ii  grep             2.5.1.ds1-5             GNU grep, egrep and fgrep
ii  lockfile-progs   0.1.10                  Programs for locking and unlocking
ii  logcheck-databas 1.2.41                  database of system log rules for t
ii  logtail          1.2.41                  Print log file lines that have not
ii  mailx            1:8.1.2-0.20050715cvs-1 A simple mail user agent
ii  postfix [mail-tr 2.2.4-1                 A high-performance mail transport 
ii  sysklogd [system 1.4.1-17                System Logging Daemon

logcheck recommends no packages.

-- debconf information:
* logcheck/noroot:
  logcheck/changes:
* logcheck/install-note: