[Logcheck-devel] Bug#295257: logcheck: ignore.d.server pure-ftpd 'Logout' without user name not matched
Jamie L. Penman-Smithson
jamie at silverdream.org
Tue Feb 15 11:41:11 UTC 2005
tag 295257 pending
thanks
On Mon, 2005-02-14 at 19:48 +0100, Ingo Theiss wrote:
> the 'Logout' pattern does not match a message without a ftp user name
> given. here is the message from syslog:
>
> Feb 14 16:31:51 web1 pure-ftpd: (?@84.133.64.201) [INFO] Logout.
I'm a bit confused as to how someone can 'logout' when they haven't
logged in yet? However that's not really relevant..
> although the missing user name from pure-ftpd is not correct the message
> is not 'critical', or?
I've never used pure-ftpd so I don't really know. Since this is being
logged as INFO it's /probably/ not anything significant.
Added the following (updated) rule to CVS:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pure-ftpd:
\([\?.[:alnum:]-]+@[._[:alnum:]-]+\) \[INFO\] Logout.$
Thanks,
--
-jamie <jamie at silverdream.org> | spamtrap: spam at silverdream.org
w: http://www.silverdream.org | p: sms at silverdream.org
pgp key @ http://silverdream.org/~jps/pub.key
21:30:02 up 17 min, 2 users, load average: 2.65, 2.52, 1.58
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20050215/966e2545/attachment.pgp
More information about the Logcheck-devel
mailing list