thr3ads.net - Logcheck devel - [Logcheck-devel] Bug#258759: logcheck-database

If this information is useful, please help other people find it:
Share via:

Bastian Blank

2004-Jul-11 11:23 UTC

[Logcheck-devel] Bug#258759: logcheck-database - rules update

Package: logcheck-database
Version: cvs
Severity: wishlist

Several rules updates:
* linux/ignore.d.paranoid/cron: Add _ to allowed characters in username.
* linux/ignore.d.paranoid/postfix
  - Merge rules for pipe and local.
  - Add rules for virtual.
* linux/ignore.d.server/courier
  - Merge linux/ignore.d.server/imap, linux/ignore.d.server/imapd-ssl,
    linux/ignore.d.server/pop3d-ssl, they are mostly identical.
  - Simplify rules.
  - Add @ to allowed characters in username.

Bastian

-- 
Men will always be men -- no matter where they are.
		-- Harry Mudd, "Mudd's Women", stardate 1329.8
-------------- next part --------------
? diff
? rulefiles/linux/ignore.d.server/test
Index: rulefiles/linux/ignore.d.paranoid/cron
==================================================================RCS file:
/cvsroot/logcheck/logcheck/rulefiles/linux/ignore.d.paranoid/cron,v
retrieving revision 1.2
diff -u -r1.2 cron
--- rulefiles/linux/ignore.d.paranoid/cron	21 Apr 2004 23:35:10 -0000	1.2
+++ rulefiles/linux/ignore.d.paranoid/cron	11 Jul 2004 11:15:14 -0000
@@ -1,4 +1,4 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ /USR/SBIN/CRON\[[0-9]+\]: \([[:alnum:]-]+\)
CMD \(.*\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ /USR/SBIN/CRON\[[0-9]+\]: \([-_[:alnum:]]+\)
CMD \(.*\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ /usr/sbin/cron\[[0-9]+\]: \(CRON\) STARTUP
\(fork ok\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ /usr/sbin/cron\[[0-9]+\]: \([^[:space:]]+\)
RELOAD \([^[:space:]]+\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ /usr/sbin/cron\[[0-9]+\]: \(CRON\) INFO
\(pidfile fd = [0-9]+\)$
Index: rulefiles/linux/ignore.d.paranoid/postfix
==================================================================RCS file:
/cvsroot/logcheck/logcheck/rulefiles/linux/ignore.d.paranoid/postfix,v
retrieving revision 1.1.1.1
diff -u -r1.1.1.1 postfix
--- rulefiles/linux/ignore.d.paranoid/postfix	19 Apr 2004 18:22:05 -0000	1.1.1.1
+++ rulefiles/linux/ignore.d.paranoid/postfix	11 Jul 2004 11:15:14 -0000
@@ -7,10 +7,7 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: [[:alnum:]]+:
client=[^[:space:]]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: disconnect from
[^[:space:]]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: connect from
[^[:space:]]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/local\[[0-9]+\]: [[:alnum:]]+:
to=[^[:space:]]+, relay=[^[:space:]]+, delay=[0-9]+, status=[[:alnum:]]+ \(.*\)$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/local\[[0-9]+\]: [[:alnum:]]+:
to=[^[:space:]]+, orig_to=[^[:space:]]+, relay=[^[:space:]]+, delay=[0-9]+,
status=[[:alnum:]]+ \(.*\)$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/pipe\[[0-9]+\]: [[:alnum:]]+:
to=[^[:space:]]+, relay=[^[:space:]]+, delay=[0-9]+, status=[[:alnum:]]+ \(.*\)$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/pipe\[[0-9]+\]: [[:alnum:]]+:
to=[^[:space:]]+, orig_to=[^[:space:]]+, relay=[^[:space:]]+, delay=[0-9]+,
status=[[:alnum:]]+ \(.*\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/(local|pipe|virtual)\[[0-9]+\]:
[[:alnum:]]+: to=[^[:space:]]+, (orig_to=[^[:space:]]+, |)relay=[^[:space:]]+,
delay=[0-9]+, status=[[:alnum:]]+ \(.*\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix\[[0-9]+\]: alias
database\.\*rebuilt$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix\[[0-9]+\]: aliases\.\*longest$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix\[[0-9]+\]: from=[^[:space:]]+$
Index: rulefiles/linux/ignore.d.server/courier
==================================================================RCS file:
rulefiles/linux/ignore.d.server/courier
diff -N rulefiles/linux/ignore.d.server/courier
--- /dev/null	1 Jan 1970 00:00:00 -0000
+++ rulefiles/linux/ignore.d.server/courier	11 Jul 2004 11:15:14 -0000
@@ -0,0 +1,7 @@
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (imap|pop3)(login|d-ssl): Connection,
ip=\[[.:[:alnum:]]+\]$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (imap|pop3)(login|d-ssl): LOGIN,
user=[-_.@[:alnum:]]+, ip=\[[.:[:alnum:]]+\]$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imap(login|d-ssl): LOGOUT,
user=[-_.@[:alnum:]]+, ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imap(login|d-ssl): LOGOUT,
ip=\[[.:[:alnum:]]+\]$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imap(login|d-ssl): DISCONNECTED,
user=[-_.@[:alnum:]]+, ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imap(login|d-ssl): DISCONNECTED,
ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pop3(login|d-ssl): (LOGOUT|TIMEOUT),
user=[-_.@[:alnum:]]+, ip=\[[.:[:alnum:]]+\], top=[0-9]+, retr=[0-9]+$
Index: rulefiles/linux/ignore.d.server/imap
==================================================================RCS file:
rulefiles/linux/ignore.d.server/imap
diff -N rulefiles/linux/ignore.d.server/imap
--- rulefiles/linux/ignore.d.server/imap	19 Apr 2004 18:22:05 -0000	1.1.1.1
+++ /dev/null	1 Jan 1970 00:00:00 -0000
@@ -1,6 +0,0 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imaplogin: Connection,
ip=\[[.:[:alnum:]]+\]$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imaplogin: LOGIN, user=[[:alnum:]]+,
ip=\[[.:[:alnum:]]+\]$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imaplogin: LOGOUT, user=[[:alnum:]]+,
ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imaplogin: LOGOUT, ip=\[[.:[:alnum:]]+\]$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imaplogin: DISCONNECTED, user=[[:alnum:]]+,
ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imaplogin: DISCONNECTED,
ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+$
Index: rulefiles/linux/ignore.d.server/imapd-ssl
==================================================================RCS file:
rulefiles/linux/ignore.d.server/imapd-ssl
diff -N rulefiles/linux/ignore.d.server/imapd-ssl
--- rulefiles/linux/ignore.d.server/imapd-ssl	19 Apr 2004 18:22:05 -0000	1.1.1.1
+++ /dev/null	1 Jan 1970 00:00:00 -0000
@@ -1,6 +0,0 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imapd-ssl: Connection,
ip=\[[.:[:alnum:]]+\]$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imapd-ssl: LOGIN, user=[[:alnum:]]+,
ip=\[[.:[:alnum:]]+\]$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imapd-ssl: DISCONNECTED,
ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imapd-ssl: DISCONNECTED, user=[[:alnum:]]+,
ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imapd-ssl: LOGOUT, user=[[:alnum:]]+,
ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imapd-ssl: LOGOUT, ip=\[[.:[:alnum:]]+\]$
Index: rulefiles/linux/ignore.d.server/pop3d-ssl
==================================================================RCS file:
rulefiles/linux/ignore.d.server/pop3d-ssl
diff -N rulefiles/linux/ignore.d.server/pop3d-ssl
--- rulefiles/linux/ignore.d.server/pop3d-ssl	3 May 2004 22:12:19 -0000	1.2
+++ /dev/null	1 Jan 1970 00:00:00 -0000
@@ -1,3 +0,0 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pop3d-ssl: Connection,
ip=\[[.:[:alnum:]]+\]$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pop3d-ssl: LOGIN, user=[[:alnum:].*]+,
ip=\[[.:[:alnum:]]+\]$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pop3d-ssl: (LOGOUT|TIMEOUT),
user=[[:alnum:]@.]+, ip=\[[.:[:alnum:]]+\], top=[0-9]+, retr=[0-9]+$
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
Url :
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20040711/4869f0af/attachment.pgp

maks attems

2004-Jul-11 17:49 UTC

head link

Bug#258759: [Logcheck-devel] Bug#258759: logcheck-database - rules update

tags 258759 pending
thanks

On Sun, 11 Jul 2004, Bastian Blank wrote:
> Package: logcheck-database
> Version: cvs
> Severity: wishlist
> 
> Several rules updates:
> * linux/ignore.d.paranoid/cron: Add _ to allowed characters in username.
> * linux/ignore.d.paranoid/postfix
>   - Merge rules for pipe and local.
>   - Add rules for virtual.
> * linux/ignore.d.server/courier
>   - Merge linux/ignore.d.server/imap, linux/ignore.d.server/imapd-ssl,
>     linux/ignore.d.server/pop3d-ssl, they are mostly identical.
>   - Simplify rules.
>   - Add @ to allowed characters in username.
woow, thanks already merged in current cvs.
a++ maks

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url :
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20040711/1b4722a4/attachment.pgp

Debian Bug Tracking System

2004-Jul-11 18:03 UTC

head link

Processed: Re: [Logcheck-devel] Bug#258759: logcheck-database - rules update

Processing commands for control at bugs.debian.org:
> tags 258759 pendingBug#258759: logcheck-database - rules update
There were no tags set.
Tags added: pending
> thanksStopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)

Debian Bug Tracking System

2004-Jul-24 02:18 UTC

head link

[Logcheck-devel] Bug#258759: marked as done (logcheck-database - rules update)

Your message dated Fri, 23 Jul 2004 22:02:11 -0400
with message-id <E1BoBrX-0003x4-00 at newraff.debian.org>
and subject line Bug#258759: fixed in logcheck 1.2.24
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 11 Jul 2004 11:23:39
+0000>From waldi at debian.org Sun Jul 11 04:23:39 2004Return-path: <waldi at debian.org>
Received: from wavehammer.waldi.eu.org [82.139.196.55] (postfix)
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1BjcQk-0003bP-00; Sun, 11 Jul 2004 04:23:38 -0700
Received: by wavehammer.waldi.eu.org (Postfix, from userid 1000)
	id 8BCB63C017; Sun, 11 Jul 2004 13:23:35 +0200 (CEST)
Date: Sun, 11 Jul 2004 13:23:35 +0200
From: Bastian Blank <waldi at debian.org>
To: submit at bugs.debian.org
Subject: logcheck-database - rules update
Message-ID: <20040711112335.GB25403 at wavehammer.waldi.eu.org>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature";
boundary="lc9FT7cWel8HagAv"
Content-Disposition: inline
User-Agent: Mutt/1.5.6+20040523i
Delivered-To: submit at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00 autolearn=no 
	version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 


--lc9FT7cWel8HagAv
Content-Type: multipart/mixed; boundary="m51xatjYGsM+13rf"
Content-Disposition: inline


--m51xatjYGsM+13rf
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Package: logcheck-database
Version: cvs
Severity: wishlist

Several rules updates:
* linux/ignore.d.paranoid/cron: Add _ to allowed characters in username.
* linux/ignore.d.paranoid/postfix
  - Merge rules for pipe and local.
  - Add rules for virtual.
* linux/ignore.d.server/courier
  - Merge linux/ignore.d.server/imap, linux/ignore.d.server/imapd-ssl,
    linux/ignore.d.server/pop3d-ssl, they are mostly identical.
  - Simplify rules.
  - Add @ to allowed characters in username.

Bastian

--=20
Men will always be men -- no matter where they are.
		-- Harry Mudd, "Mudd's Women", stardate 1329.8

--m51xatjYGsM+13rf
Content-Type: text/plain; charset=utf-8
Content-Disposition: attachment; filename=diff

? diff
? rulefiles/linux/ignore.d.server/test
Index: rulefiles/linux/ignore.d.paranoid/cron
==================================================================RCS file:
/cvsroot/logcheck/logcheck/rulefiles/linux/ignore.d.paranoid/cron,v
retrieving revision 1.2
diff -u -r1.2 cron
--- rulefiles/linux/ignore.d.paranoid/cron	21 Apr 2004 23:35:10 -0000	1.2
+++ rulefiles/linux/ignore.d.paranoid/cron	11 Jul 2004 11:15:14 -0000
@@ -1,4 +1,4 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ /USR/SBIN/CRON\[[0-9]+\]: \([[:alnum:]-]+\)
CMD \(.*\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ /USR/SBIN/CRON\[[0-9]+\]: \([-_[:alnum:]]+\)
CMD \(.*\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ /usr/sbin/cron\[[0-9]+\]: \(CRON\) STARTUP
\(fork ok\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ /usr/sbin/cron\[[0-9]+\]: \([^[:space:]]+\)
RELOAD \([^[:space:]]+\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ /usr/sbin/cron\[[0-9]+\]: \(CRON\) INFO
\(pidfile fd = [0-9]+\)$
Index: rulefiles/linux/ignore.d.paranoid/postfix
==================================================================RCS file:
/cvsroot/logcheck/logcheck/rulefiles/linux/ignore.d.paranoid/postfix,v
retrieving revision 1.1.1.1
diff -u -r1.1.1.1 postfix
--- rulefiles/linux/ignore.d.paranoid/postfix	19 Apr 2004 18:22:05 -0000	1.1.1.1
+++ rulefiles/linux/ignore.d.paranoid/postfix	11 Jul 2004 11:15:14 -0000
@@ -7,10 +7,7 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: [[:alnum:]]+:
client=[^[:space:]]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: disconnect from
[^[:space:]]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: connect from
[^[:space:]]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/local\[[0-9]+\]: [[:alnum:]]+:
to=[^[:space:]]+, relay=[^[:space:]]+, delay=[0-9]+, status=[[:alnum:]]+ \(.*\)$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/local\[[0-9]+\]: [[:alnum:]]+:
to=[^[:space:]]+, orig_to=[^[:space:]]+, relay=[^[:space:]]+, delay=[0-9]+,
status=[[:alnum:]]+ \(.*\)$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/pipe\[[0-9]+\]: [[:alnum:]]+:
to=[^[:space:]]+, relay=[^[:space:]]+, delay=[0-9]+, status=[[:alnum:]]+ \(.*\)$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/pipe\[[0-9]+\]: [[:alnum:]]+:
to=[^[:space:]]+, orig_to=[^[:space:]]+, relay=[^[:space:]]+, delay=[0-9]+,
status=[[:alnum:]]+ \(.*\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/(local|pipe|virtual)\[[0-9]+\]:
[[:alnum:]]+: to=[^[:space:]]+, (orig_to=[^[:space:]]+, |)relay=[^[:space:]]+,
delay=[0-9]+, status=[[:alnum:]]+ \(.*\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix\[[0-9]+\]: alias
database\.\*rebuilt$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix\[[0-9]+\]: aliases\.\*longest$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix\[[0-9]+\]: from=[^[:space:]]+$
Index: rulefiles/linux/ignore.d.server/courier
==================================================================RCS file:
rulefiles/linux/ignore.d.server/courier
diff -N rulefiles/linux/ignore.d.server/courier
--- /dev/null	1 Jan 1970 00:00:00 -0000
+++ rulefiles/linux/ignore.d.server/courier	11 Jul 2004 11:15:14 -0000
@@ -0,0 +1,7 @@
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (imap|pop3)(login|d-ssl): Connection,
ip=\[[.:[:alnum:]]+\]$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (imap|pop3)(login|d-ssl): LOGIN,
user=[-_.@[:alnum:]]+, ip=\[[.:[:alnum:]]+\]$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imap(login|d-ssl): LOGOUT,
user=[-_.@[:alnum:]]+, ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imap(login|d-ssl): LOGOUT,
ip=\[[.:[:alnum:]]+\]$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imap(login|d-ssl): DISCONNECTED,
user=[-_.@[:alnum:]]+, ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imap(login|d-ssl): DISCONNECTED,
ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pop3(login|d-ssl): (LOGOUT|TIMEOUT),
user=[-_.@[:alnum:]]+, ip=\[[.:[:alnum:]]+\], top=[0-9]+, retr=[0-9]+$
Index: rulefiles/linux/ignore.d.server/imap
==================================================================RCS file:
rulefiles/linux/ignore.d.server/imap
diff -N rulefiles/linux/ignore.d.server/imap
--- rulefiles/linux/ignore.d.server/imap	19 Apr 2004 18:22:05 -0000	1.1.1.1
+++ /dev/null	1 Jan 1970 00:00:00 -0000
@@ -1,6 +0,0 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imaplogin: Connection,
ip=\[[.:[:alnum:]]+\]$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imaplogin: LOGIN, user=[[:alnum:]]+,
ip=\[[.:[:alnum:]]+\]$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imaplogin: LOGOUT, user=[[:alnum:]]+,
ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imaplogin: LOGOUT, ip=\[[.:[:alnum:]]+\]$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imaplogin: DISCONNECTED, user=[[:alnum:]]+,
ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imaplogin: DISCONNECTED,
ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+$
Index: rulefiles/linux/ignore.d.server/imapd-ssl
==================================================================RCS file:
rulefiles/linux/ignore.d.server/imapd-ssl
diff -N rulefiles/linux/ignore.d.server/imapd-ssl
--- rulefiles/linux/ignore.d.server/imapd-ssl	19 Apr 2004 18:22:05 -0000	1.1.1.1
+++ /dev/null	1 Jan 1970 00:00:00 -0000
@@ -1,6 +0,0 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imapd-ssl: Connection,
ip=\[[.:[:alnum:]]+\]$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imapd-ssl: LOGIN, user=[[:alnum:]]+,
ip=\[[.:[:alnum:]]+\]$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imapd-ssl: DISCONNECTED,
ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imapd-ssl: DISCONNECTED, user=[[:alnum:]]+,
ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imapd-ssl: LOGOUT, user=[[:alnum:]]+,
ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imapd-ssl: LOGOUT, ip=\[[.:[:alnum:]]+\]$
Index: rulefiles/linux/ignore.d.server/pop3d-ssl
==================================================================RCS file:
rulefiles/linux/ignore.d.server/pop3d-ssl
diff -N rulefiles/linux/ignore.d.server/pop3d-ssl
--- rulefiles/linux/ignore.d.server/pop3d-ssl	3 May 2004 22:12:19 -0000	1.2
+++ /dev/null	1 Jan 1970 00:00:00 -0000
@@ -1,3 +0,0 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pop3d-ssl: Connection,
ip=\[[.:[:alnum:]]+\]$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pop3d-ssl: LOGIN, user=[[:alnum:].*]+,
ip=\[[.:[:alnum:]]+\]$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pop3d-ssl: (LOGOUT|TIMEOUT),
user=[[:alnum:]@.]+, ip=\[[.:[:alnum:]]+\], top=[0-9]+, retr=[0-9]+$

--m51xatjYGsM+13rf--

--lc9FT7cWel8HagAv
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iEYEARECAAYFAkDxIzcACgkQnw66O/MvCNG79ACgi60i5zUd5gItY2sU4CxDX4L8
PSYAnRKtxm9SZeAywgHhsoBSFV++4tYV
=ueSq
-----END PGP SIGNATURE-----

--lc9FT7cWel8HagAv--

---------------------------------------
Received: (at 258759-close) by bugs.debian.org; 24 Jul 2004 02:08:09
+0000>From katie at ftp-master.debian.org Fri Jul 23 19:08:09 2004Return-path: <katie at ftp-master.debian.org>
Received: from newraff.debian.org [208.185.25.31] (mail)
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1BoBxJ-0000ff-00; Fri, 23 Jul 2004 19:08:09 -0700
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
	id 1BoBrX-0003x4-00; Fri, 23 Jul 2004 22:02:11 -0400
From: Todd Troxell <ttroxell at debian.org>
To: 258759-close at bugs.debian.org
X-Katie: $Revision: 1.51 $
Subject: Bug#258759: fixed in logcheck 1.2.24
Message-Id: <E1BoBrX-0003x4-00 at newraff.debian.org>
Sender: Archive Administrator <katie at ftp-master.debian.org>
Date: Fri, 23 Jul 2004 22:02:11 -0400
Delivered-To: 258759-close at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 
X-CrossAssassin-Score: 5

Source: logcheck
Source-Version: 1.2.24

We believe that the bug you reported is fixed in the latest version of
logcheck, which is due to be installed in the Debian FTP archive:

logcheck-database_1.2.24_all.deb
  to pool/main/l/logcheck/logcheck-database_1.2.24_all.deb
logcheck_1.2.24.dsc
  to pool/main/l/logcheck/logcheck_1.2.24.dsc
logcheck_1.2.24.tar.gz
  to pool/main/l/logcheck/logcheck_1.2.24.tar.gz
logcheck_1.2.24_all.deb
  to pool/main/l/logcheck/logcheck_1.2.24_all.deb
logtail_1.2.24_all.deb
  to pool/main/l/logcheck/logtail_1.2.24_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 258759 at bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Todd Troxell <ttroxell at debian.org> (supplier of updated logcheck
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster at debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Friday, 23 Jul 2004 21:39:19 -0500
Source: logcheck
Binary: logcheck logtail logcheck-database
Architecture: source all
Version: 1.2.24
Distribution: unstable
Urgency: low
Maintainer: Debian logcheck Team <logcheck-devel at
lists.alioth.debian.org>
Changed-By: Todd Troxell <ttroxell at debian.org>
Description: 
 logcheck   - Mails anomalies in the system logfiles to the administrator
 logcheck-database - A database of system log rules for the use of log checkers
 logtail    - Print log file lines that have not been read
Closes: 206495 213711 257874 258735 258759 259092 259094 259371 259466 260096
260102 260103 260105 260330 260382 260810
Changes: 
 logcheck (1.2.24) unstable; urgency=low
 .
   eevans:
   * Added violations ignore rule for squid (Closes: #257874)
   maks
   * Added dhcpd-client, kernel, ntp, postfix rules. (Closes: #259094)
   * Added lots of postfix rules at level workstation for those,
     who wants to include /var/log/mail.log. (Closes: #206495)
   * Generalize "nobody" to "[_[:alnum:]-]+" for su rule.
   * Update rules ignore.d.paranoid/cron, ignore.d.paranoid/postfix.
     New courier rules merged and simplified from imap, impd-ssl and pop3d-ssl.
     thanks to Bastian Blank <waldi at debian.org>. (Closes: #258759)
   * Fix pid regex in cyrus rules. (Closes: #259092)
   * Added cyrus rules for notifyd. (Closes: #259466)
   * Make sure logtail gets a logfile to read, if not exit soon.
     Documented -o switch in logtail(8). (Closes: #259371)
   * Added logcheck-devel mail to logtail(8) and copyright.
   * Added userv rules. (Closes: #260105)
   * Generalize user match in spamd rule. (Closes: #260103)
   * Added a ippl rule at level workstation. (Closes: #260102)
   * Updated logcheck help message to all existent switches.
     Corrected logcheck command line parsing, -T needs no args.
     Use 6 'X' for mktemp(1) template. Better lock handling. (Closes:
#260330)
   * Do not create unused /var/state/logcheck and really get rid of it.
     (Closes: #260096)
   * Added cs Translation. thanks Jan Outrata. (Closes: #260382)
   * Remove duplicate postfix rules, fix for remote string add lmtp rule.
     (Closes: #260810)
   todd:
   * Added 2 kernel rules for sparc workstations.
   * Added nearly 50 squid rules. (Closes: #213711)
   * Fix anacron Normal exit rule.
   * Move adduser from preinst to postinst (Closes: #258735)
   * Update pump and dhclient rules.
Files: 
 b12f7f6e9f7ee1c1ab93c11d06197436 670 admin optional logcheck_1.2.24.dsc
 fac761afff4056f62d05e0b0a49a8941 78439 admin optional logcheck_1.2.24.tar.gz
 b42736deefef2c9cbb27e596fe3453ca 38306 admin optional logcheck_1.2.24_all.deb
 544fe294c31535dae713ca94746030c4 45540 admin optional
logcheck-database_1.2.24_all.deb
 ab277c25932c9ef600581ebb1aa8f68c 22412 admin optional logtail_1.2.24_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBAb4/4u3oQ3FHP2YRAteqAKDC5u2SOudNtfjaZvMM1gFdFIE1AQCfXBAm
nUk8s8a4rlxDrmTdK7SD5XI=XQO7
-----END PGP SIGNATURE-----

Logcheck devel - Jul 2004 - Bug#258759: logcheck-database - rules update

[Logcheck-devel] Bug#258759: logcheck-database - rules update

Bug#258759: [Logcheck-devel] Bug#258759: logcheck-database - rules update

Processed: Re: [Logcheck-devel] Bug#258759: logcheck-database - rules update

[Logcheck-devel] Bug#258759: marked as done (logcheck-database - rules update)