Dear logcheck Team,
sorry for choosing the direct contact I don't know if it's the correct
way.
I am using logcheck on a webserver where pureftp is installed for upload
of content. Logcheck is working fine except for one ignore.d rule
regarding the logout messages from pureftp.
Logcheck is reporting lots (an I mean lots) of messages from the
following type:
Feb 5 06:02:45 web1 pure-ftpd: (www-0021-02 at 81.173.154.221) [INFO]
Logout.
I found the ignore.d for pureftp, but it doesnt match the kind pureftp
is reporting the Logout message:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pure-ftpd: \(\?@[._[:alnum:]-]+\)
\[INFO\] Logout.$
My question is: Is it a wrong configuration of pureftp / syslog or has
the ignore.d rule to be tweaked (is it a kind of bug)?
Thank you for your work an time reading my mail.
Regards,
Ingo
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20050205/de664b39/attachment.htm
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 481 bytes
Desc: This is a digitally signed message part
Url :
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20050205/de664b39/attachment.pgp
On Sat, Feb 05, 2005 at 01:22:15PM +0100, Ingo Theiss muttered these words:> Logcheck is reporting lots (an I mean lots) of messages from the > following type: > > Feb 5 06:02:45 web1 pure-ftpd: (www-0021-02 at 81.173.154.221) [INFO] > Logout. > > > I found the ignore.d for pureftp, but it doesnt match the kind pureftp > is reporting the Logout message: > > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pure-ftpd: \(\?@[._[:alnum:]-]+\) > \[INFO\] Logout.$ > > > My question is: Is it a wrong configuration of pureftp / syslog or has > the ignore.d rule to be tweaked (is it a kind of bug)?Looks like a bug, fire up reportbug(1) and report it! -- Eric Evans eevans at sym-link.com -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20050205/3369505f/attachment.pgp
Possibly Parallel Threads
- Bug#294950: logcheck: ignore.d.server courier imaplogin: DISCONNECTED not matching
- Rename violations.ignore.d/logcheck-pureftp
- logcheck-database -- volatile?
- integrated mail+ftp+samba+proxy auth mysql
- Bug#275946: Acknowledgement (newline not recognized when logcheck sends emails)