[Logcheck-devel] Bug#581658: logcheck: ignore ssh disconnect

[Bob Proulx]

Package: logcheck
Version: 1.3.8
Severity: normal

The new ssh in Squeeze now causes an additional line to be written by
sshd to the auth.log file:

  May 14 12:13:33 localhost sshd[6940]: Received disconnect from 192.0.32.10: 11: disconnected by user

I suggest the following addition to the ignore.d.server/ssh rules.

  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Received disconnect from [^[:space:]]+: [0-9]+: disconnected by user

Thanks,
Bob