martin f krafft
2006-Jun-10 00:26 UTC
[Logcheck-devel] Bug#372541: logcheck filter update for ignore.server.d/proftpd
Package: logcheck-database
Severity: wishlist
Tags: patch
Version: 1.2.39
--- /tmp/proftpd 2006-06-10 02:18:51.869069616 +0200
+++ /etc/logcheck/ignore.d.server/proftpd 2006-06-10 02:26:48.537604984 +0200
@@ -1,3 +1,4 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd\[[0-9]+\]: [._[:alnum:]-]+
\([._[:alnum:]-]+\[[0-9.]{7,15}\]\) (- )FTP session (opened|closed)\.$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd\[[0-9]+\]: [._[:alnum:]-]+
\([._[:alnum:]-]+\[[0-9.]{7,15}\]\) (- )USER [\._[:alnum:]-]+: Login
successful\.$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd\[[0-9]+\]: [._[:alnum:]-]+
\([._[:alnum:]-]+\[[0-9.]{7,15}\]\) (- )(USER|ANON) [\._[:alnum:]-]+: Login
successful\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd: \(pam_unix\) session
(opened|closed) for user [\._[:alnum:]-]+( by \(uid=[0-9]+\))$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd\[[0-9]+\]: [._[:alnum:]-]+
\([._[:alnum:]-]+\[[0-9.]{7,15}\]\) (- )FTP no transfer timeout, disconnected$
--
Please do not send copies of list mail to me; I read the list!
.''`. martin f. krafft <madduck at debian.org>
: :' : proud Debian developer and author: http://debiansystem.info
`. `'`
`- Debian - when you have better things to do than fixing a system
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature (GPG/PGP)
Url :
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20060610/79d45cb0/attachment.pgp