Dear logcheck Team, sorry for choosing the direct contact I don't know if it's the correct way. I am using logcheck on a webserver where pureftp is installed for upload of content. Logcheck is working fine except for one ignore.d rule regarding the logout messages from pureftp. Logcheck is reporting lots (an I mean lots) of messages from the following type: Feb 5 06:02:45 web1 pure-ftpd: (www-0021-02 at 81.173.154.221) [INFO] Logout. I found the ignore.d for pureftp, but it doesnt match the kind pureftp is reporting the Logout message: ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pure-ftpd: \(\?@[._[:alnum:]-]+\) \[INFO\] Logout.$ My question is: Is it a wrong configuration of pureftp / syslog or has the ignore.d rule to be tweaked (is it a kind of bug)? Thank you for your work an time reading my mail. Regards, Ingo -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20050205/de664b39/attachment.htm -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 481 bytes Desc: This is a digitally signed message part Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20050205/de664b39/attachment.pgp
On Sat, Feb 05, 2005 at 01:22:15PM +0100, Ingo Theiss muttered these words:> Logcheck is reporting lots (an I mean lots) of messages from the > following type: > > Feb 5 06:02:45 web1 pure-ftpd: (www-0021-02 at 81.173.154.221) [INFO] > Logout. > > > I found the ignore.d for pureftp, but it doesnt match the kind pureftp > is reporting the Logout message: > > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pure-ftpd: \(\?@[._[:alnum:]-]+\) > \[INFO\] Logout.$ > > > My question is: Is it a wrong configuration of pureftp / syslog or has > the ignore.d rule to be tweaked (is it a kind of bug)?Looks like a bug, fire up reportbug(1) and report it! -- Eric Evans eevans at sym-link.com -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20050205/3369505f/attachment.pgp
Reasonably Related Threads
- Bug#294950: logcheck: ignore.d.server courier imaplogin: DISCONNECTED not matching
- Rename violations.ignore.d/logcheck-pureftp
- logcheck-database -- volatile?
- integrated mail+ftp+samba+proxy auth mysql
- Bug#275946: Acknowledgement (newline not recognized when logcheck sends emails)