[Logcheck-devel] Bug#328251: logcheck: please add rules for popa3d

[Jamie L. Penman-Smithson]

package logcheck-database
tags 328251 pending
thanks

On Fri, 2005-09-16 at 14:15 +0200, maximilian attems wrote:
> ----- Forwarded message from Reinhold Trocker <Reinhold.Trocker at raiffeisen.it> -----
> To: maximilian attems <debian at sternwelten.at>
> Subject: Antwort: Re: [Logcheck-devel] Bug#328251: logcheck: please add rules for
>  popa3d
> From: Reinhold Trocker <Reinhold.Trocker at raiffeisen.it>
> Date: Thu, 15 Sep 2005 17:23:31 +0200
> 
> examples: 
> Sep 15 17:02:23 lin popa3d[14561]: Session from 127.0.0.1
<snip>
> the exception is the following line:
> Authentication passed for <username>
> 
> so the regex would be 
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ popa3d\[[0-9]+\]: Authentication passed 
> for [._[:alnum:]-]+$
> 
> At least I think so: is the regex  "[._[:alnum:]-]+" correct for 
> usernames?

Yes, it would.

I've added the following rules, which will be included in the next
release:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ popa3d\[[0-9]+\]: Session from
[:0-9a-f.]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ popa3d\[[0-9]+\]: Authentication
passed for [._[:alnum:]-]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ popa3d\[[0-9]+\]: [0-9]+ message
\([0-9]+ bytes\) loaded$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ popa3d\[[0-9]+\]: [0-9]+ \([0-9]+\)
deleted, [0-9]+ \([0-9]+\) left$

Thanks,

-- 
-Jamie L. Penman-Smithson <jamie at silverdream.org>
 t: +44 1273 424795; f: +44 1273 424795
 PGP: C0A7 955E EED6 A309 23D7 863B C76A 26A3 F0DC FCA8
 never send mail to: oubliette.z at gmail.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20051015/56ccee70/attachment.pgp