[Logcheck-devel] Bug#310423: logcheck-database: rules for dovecot are incompleet

[Jamie L. Penman-Smithson]

package logcheck-database
retitle 310423 logcheck-database: rules for dovecot are incomplete
tags 310423 pending
thanks

On Mon, 2005-05-23 at 23:11 +0200, Robbert Muller wrote:
> Jamie L. Penman-Smithson wrote:
> > Could you provide some messages for the dovecot pop3 server?
> 
> the same as imap ;-)
>
> the rules i made
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pop3-login: Login: [.[:alnum:]@-]+ 
> \[[0-9.]+\]$
<snip>
> the only type of line i got till now
> May 23 22:54:59 host pop3-login: Login: user at domain.nl [10.10.10.10]

I've modified the rules in CVS for dovecot to match messages from the
pop3 daemon too:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (imap|pop3)-login: Login:
[.[:alnum:]@-]+ \[[0-9.]+\]$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (imap|pop3)-login: Disconnected
\[[0-9.]+\]$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (imap|pop3)\([^[:space:]]+\): File
isn't in mbox format: [^[:space:]]+$

Thanks for your bug report,

-- 
-Jamie L. Penman-Smithson <jamie at silverdream.org>
 t: +44 1273 424795; f: +44 1273 424795
 PGP: C0A7 955E EED6 A309 23D7 863B C76A 26A3 F0DC FCA8
 never send mail to: oubliette.z at gmail.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20050523/cd429050/attachment.pgp