Bob Proulx
2010-May-14 18:25 UTC
[Logcheck-devel] Bug#581658: logcheck: ignore ssh disconnect
Package: logcheck
Version: 1.3.8
Severity: normal
The new ssh in Squeeze now causes an additional line to be written by
sshd to the auth.log file:
May 14 12:13:33 localhost sshd[6940]: Received disconnect from 192.0.32.10:
11: disconnected by user
I suggest the following addition to the ignore.d.server/ssh rules.
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Received disconnect from
[^[:space:]]+: [0-9]+: disconnected by user
Thanks,
Bob
Hannes von Haugwitz
2010-May-14 20:27 UTC
[Logcheck-devel] Bug#581658: Bug#581658: logcheck: ignore ssh disconnect
tags 581658 +moreinfo thanks Hi, this should have been fixed in 1.3.7 (see #567317 or #567355). Please ensure that your version of /etc/logcheck/ignore.d.server/ssh is up to date and that you use the "server" or "workstation" level (set REPORTLEVEL in /etc/logcheck/logcheck.conf). Please provide feedback, if that solves your problem. Thanks Hannes
Debian Bug Tracking System
2010-May-14 20:30 UTC
[Logcheck-devel] Processed: Re: Bug#581658: logcheck: ignore ssh disconnect
Processing commands for control at bugs.debian.org:> tags 581658 +moreinfoBug #581658 [logcheck] logcheck: ignore ssh disconnect Added tag(s) moreinfo.> thanksStopping processing here. Please contact me if you need assistance. -- 581658: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=581658 Debian Bug Tracking System Contact owner at bugs.debian.org with problems
Debian Bug Tracking System
2010-May-15 05:15 UTC
[Logcheck-devel] Bug#581658: marked as done (logcheck: ignore ssh disconnect)
Your message dated Fri, 14 May 2010 23:04:11 -0600 with message-id <20100515050411.GA30005 at dementia.proulx.com> and subject line Re: [Logcheck-devel] Bug#581658: logcheck: ignore ssh disconnect has caused the Debian Bug report #581658, regarding logcheck: ignore ssh disconnect to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner at bugs.debian.org immediately.) -- 581658: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=581658 Debian Bug Tracking System Contact owner at bugs.debian.org with problems -------------- next part -------------- An embedded message was scrubbed... From: Bob Proulx <bob at proulx.com> Subject: logcheck: ignore ssh disconnect Date: Fri, 14 May 2010 12:25:16 -0600 Size: 1994 URL: <http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20100515/c6cc2e9e/attachment.eml> -------------- next part -------------- An embedded message was scrubbed... From: Bob Proulx <bob at proulx.com> Subject: Re: [Logcheck-devel] Bug#581658: logcheck: ignore ssh disconnect Date: Fri, 14 May 2010 23:04:11 -0600 Size: 2705 URL: <http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20100515/c6cc2e9e/attachment-0001.eml>