Logcheck devel - Sep 2004 - Bug#271569: logcheck: Every connection logged by uw-imapd is reported

Package: logcheck
Version: 1.2.25
Severity: normal

Log check emails this:
System Events
=-=-=-=-=-=-Sep 13 12:03:21 localhost imapd[15926]: connect from 127.0.0.1
(127.0.0.1)
Sep 13 12:03:21 localhost imapd[15929]: connect from 127.0.0.1 (127.0.0.1)
Sep 13 12:03:21 localhost imapd[15932]: connect from 127.0.0.1 (127.0.0.1)
Sep 13 12:53:09 localhost imapd[16033]: connect from 198.95.226.228
(198.95.226.228)

The rules for uw-imapd don't seem to match the output. On systems with
very high imap traffic this gets problematic. My logs basically
trigger logcheck every hour of every day.

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.8.1
Locale: LANG=C, LC_CTYPE=C

Versions of packages logcheck depends on:
ii  adduser                       3.59       Add and remove users and groups
ii  cron                          3.0pl1-86  management of regular background p
ii  debconf [debconf-2.0]         1.4.30.2   Debian configuration management sy
ii  debianutils                   2.8.4      Miscellaneous utilities specific t
ii  exim [mail-transport-agent]   3.36-11    An MTA (Mail Transport Agent)
ii  lockfile-progs                0.1.10     Programs for locking and unlocking
ii  logcheck-database             1.2.25     A database of system log rules for
ii  logtail                       1.2.25     Print log file lines that have not
ii  mailutils [mailx]             1:0.5-3    GNU mailutils utilities for handli
ii  perl                          5.8.4-2    Larry Wall's Practical
Extraction
ii  sysklogd [system-log-daemon]  1.4.1-15   System Logging Daemon

-- debconf information excluded

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

reassign 271569 uw-imapd
thanks

On 13-09-2004 22:06, Will Deutsch wrote:
| Package: logcheck
[cut]
| The rules for uw-imapd don't seem to match the output. On systems with
| very high imap traffic this gets problematic. My logs basically
| trigger logcheck every hour of every day.

The rules for uw-imapd is provided by the uw-imapd package (maintained
by me), as documented in README.Maintainer in the logcheck package.

Please report against correct package (I have done it in this case)[1].


regards,

~ - Jonas


[1] ...and please generally consider suggesting package maintainers to
adopt the logcheck rules of their packages - they (ought to) know better
the logging output of their own programs than the logcheck maintainers :-)

- --
* Jonas Smedegaard - idealist og Internet-arkitekt
* Tlf.: +45 40843136  Website: http://dr.jones.dk/

~ - Enden er n?r: http://www.shibumi.org/eoti.htm
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBR/xqn7DbMsAkQLgRAordAJoCdGmn8VUuAObVnWmFW8kpFJflxgCeNYz6
GNI8laGnGg/YZUE5V252884=s6Vt
-----END PGP SIGNATURE-----

Processing commands for control at bugs.debian.org:
> reassign 271569 uw-imapd
Bug#271569: logcheck: Every connection logged by uw-imapd is reported
Bug reassigned from package `logcheck' to `uw-imapd'.
> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)