Bug#324615: [Logcheck-devel] Bug#324615: new rules for imp4

maximilian attems debian at sternwelten.at
Thu Sep 1 18:05:55 UTC 2005


tags 324615 moreinfo
stop



On Tue, 23 Aug 2005, Martin Lohmeier wrote:

> Hi,
> 
> here is one line for the imp4 package and one (I don't have more) line
> from the log file. Same as with the horde3 file: I've tested it and CC
> this mail to the maintainer.
> 
> by, Martin

thanks for your contribution, looks very nice indeed.
but i need for info on what that process can be named.
 

> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ .+\[[0-9]+\]: \[imp\] Login success for [@._[:alnum:]-]+ \[[.0-9]{7,15}\] to \{[._[:alnum:]-]+:[0-9]+\} \[on line [0-9]+ of ".+"\]$
> Aug 22 01:44:53 djinn01 mein-horde.de/horde[13302]: [imp] Login success for martin at mein-horde.de [212.202.173.165] to {127.0.0.1:143} [on line 93 of "/var/svr/mein-horde.de-ssl/htdocs/horde/imp/lib/Auth/imp.php"]

as soon as this explained i'll integrate your rules into latest
logcheck-database.

--
maks






More information about the Logcheck-devel mailing list