[Logcheck-devel] Bug#191637: New rules for qpopper

[Jamie L. Penman-Smithson]

package logcheck-database
tags 125794 pending
tags 191637 pending
thanks

I've been running the latest version of qpopper from unstable for a few
days and I've added the following rules to CVS:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ in.qpopper\[[0-9]+\]: connect from
[._[:alnum:]-]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ in.qpopper\[[0-9]+\]:
\(v[.[:digit:]]+\) POP login by user \"[@._[:alnum:]-]+\" at
\([._[:alnum:]-]+\) [.[:digit:]]+ \[pop_log.c:244\]$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ in.qpopper\[[0-9]+\]: \[drac\]: login
by [@._[:alnum:]-]+ from host [._[:alnum:]-]+ \([.[:digit:]]+\)
\[drac.c:[0-9]+\]$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ in.qpopper\[[0-9]+\]:
[@._[:alnum:]-]+ at [._[:alnum:]-]+ \([.[:digit:]]+\): -ERR Message
[[:digit:]]+ does not exist. \[pop_send.c:289\]$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ in.qpopper\[[0-9]+\]:
([@._[:alnum:]-]+|\(null\)) at [._[:alnum:]-]+ \([.[:digit:]]+\): -ERR
Unknown command: \"[[:alnum:]]+\". \[pop_get_command.c:152\]$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ in.qpopper\[[0-9]+\]:
\(v[.[:digit:]]+\) Unable to get canonical name of client [.[:digit:]]+:
Name or service not known \(-2\) \[pop_init.c:1196\]$

If there are any further messages that should be ignored, let us know.

-- 
-Jamie L. Penman-Smithson <jamie at silverdream.org>
 t: +44 1273 424795; f: +44 1273 424795
 PGP: C0A7 955E EED6 A309 23D7 863B C76A 26A3 F0DC FCA8
 never send mail to: oubliette.z at gmail.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20050516/3a215554/attachment-0001.pgp