Bug#324615: [Logcheck-devel] Bug#324615: new rules for imp4
maximilian attems
debian at sternwelten.at
Thu Sep 1 18:05:55 UTC 2005
tags 324615 moreinfo
stop
On Tue, 23 Aug 2005, Martin Lohmeier wrote:
> Hi,
>
> here is one line for the imp4 package and one (I don't have more) line
> from the log file. Same as with the horde3 file: I've tested it and CC
> this mail to the maintainer.
>
> by, Martin
thanks for your contribution, looks very nice indeed.
but i need for info on what that process can be named.
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ .+\[[0-9]+\]: \[imp\] Login success for [@._[:alnum:]-]+ \[[.0-9]{7,15}\] to \{[._[:alnum:]-]+:[0-9]+\} \[on line [0-9]+ of ".+"\]$
> Aug 22 01:44:53 djinn01 mein-horde.de/horde[13302]: [imp] Login success for martin at mein-horde.de [212.202.173.165] to {127.0.0.1:143} [on line 93 of "/var/svr/mein-horde.de-ssl/htdocs/horde/imp/lib/Auth/imp.php"]
as soon as this explained i'll integrate your rules into latest
logcheck-database.
--
maks
More information about the Logcheck-devel
mailing list