Bug#294950: [Logcheck-devel] Bug#294950: logcheck: ignore.d.server courier imaplogin: DISCONNECTED not matching

[maximilian attems]

tags 294950 pending
thanks

On Sat, 12 Feb 2005, Ingo Theiss wrote:

> the ignore.d.server pattern for courier 'imaplogin: DISCONNECTED' does
> not match the following line:
> 
> Feb 12 16:19:47 backup imaplogin: DISCONNECTED,
> user=example at example.com, ip=[::ffff:111.111.111.111],
> headers=14013, body=0, time=1
> 
> This line should be ignored like the other DISCONNECTED messages. Or am
> I wrong?

yes line should be ignored, fixed in current cvs for next release.
you might want to test the rule that should match aboves message
on your box.
thanks for nice bug report + feedback.
a++ maks

-------------- next part --------------
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imap(login|d-ssl): DISCONNECTED, user=[-_.@[:alnum:]]+, ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+, time=[0-9]+$