Bug#328251: (fwd) Antwort: Re: [Logcheck-devel] Bug#328251: logcheck: please add rules for popa3d
maximilian attems
debian at sternwelten.at
Fri Sep 16 12:15:05 UTC 2005
----- Forwarded message from Reinhold Trocker <Reinhold.Trocker at raiffeisen.it> -----
To: maximilian attems <debian at sternwelten.at>
Subject: Antwort: Re: [Logcheck-devel] Bug#328251: logcheck: please add rules for
popa3d
From: Reinhold Trocker <Reinhold.Trocker at raiffeisen.it>
Date: Thu, 15 Sep 2005 17:23:31 +0200
examples:
Sep 15 17:02:23 lin popa3d[14561]: Session from 127.0.0.1
Sep 15 17:02:23 lin popa3d[14561]: Authentication passed for myusername
Sep 15 17:02:23 lin popa3d[14561]: 1 message (781 bytes) loaded
Sep 15 17:02:23 lin popa3d[14561]: 0 (0) deleted, 1 (781) left
Sep 15 17:12:23 lin popa3d[14624]: Session from 127.0.0.1
Sep 15 17:12:23 lin popa3d[14624]: Authentication passed for myusername
Sep 15 17:12:23 lin popa3d[14624]: 1 message (781 bytes) loaded
Sep 15 17:12:23 lin popa3d[14624]: 0 (0) deleted, 1 (781) left
Sep 15 17:17:35 lin popa3d[14712]: Session from 127.0.0.1
Sep 15 17:17:38 lin popa3d[14712]: Authentication passed for myusername
Sep 15 17:17:38 lin popa3d[14712]: 1 message (781 bytes) loaded
Sep 15 17:17:38 lin popa3d[14712]: 1 (781) deleted, 0 (0) left
all lines but one are complete so please just add a $.
the exception is the following line:
Authentication passed for <username>
so the regex would be
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ popa3d\[[0-9]+\]: Authentication passed
for [._[:alnum:]-]+$
At least I think so: is the regex "[._[:alnum:]-]+" correct for
usernames?
Thanks for maintainance + bye
Reinhold
----- End forwarded message -----
More information about the Logcheck-devel
mailing list