Hi,
Running logcheck 1.3.6 on debian lenny.
Getting lines like these every hour:
Feb 9 12:01:02 net-bk01 rsyncd[12243]: rsync to
itoc/bk/net-admin01.domain.com/2010-02-09-05:00:01/var/ from UNKNOWN (9.9.9.9)
while having this in /etc/logcheck/ignore.d.server/rsync:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsyncd\[[0-9]+\]: rsync (to|on)
[[:alnum:]/._-:]+ from [@._[:alnum:]-]+ \([0-9.]{7,15}\)$
Funny thing is when running manually:
su -s /bin/bash -c "nice -n10 /usr/sbin/logcheck -o -t" logcheck
produces no output.
Somebody have a clue?
Thanks :-)
Regards
Kristoffer
also sprach Kristoffer Egefelt <kristoffer at itoc.dk> [2010.02.10.0018 +1300]:> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsyncd\[[0-9]+\]: rsync (to|on) > [[:alnum:]/._-:]+ from [@._[:alnum:]-]+ \([0-9.]{7,15}\)$You need to ^^ swap those two as '-' in a character grouping must appear first or last. -- .''`. martin f. krafft <madduck at d.o> Related projects: : :' : proud Debian developer http://debiansystem.info `. `'` http://people.debian.org/~madduck http://vcs-pkg.org `- Debian - when you have better things to do than fixing systems god is dead. -- nietzsche nietzsche is dead. -- god nietzsche is god. -- dead -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 198 bytes Desc: Digital signature (see http://martin-krafft.net/gpg/) URL: <http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20100210/24eeefa0/attachment.pgp>