[Logcheck-devel] Bug#295257: logcheck: ignore.d.server pure-ftpd 'Logout' without user name not matched

[Jamie L. Penman-Smithson]

tag 295257 pending
thanks

On Mon, 2005-02-14 at 19:48 +0100, Ingo Theiss wrote: 
> the 'Logout' pattern does not match a message without a ftp user name
> given. here is the message from syslog:
> 
> Feb 14 16:31:51 web1 pure-ftpd: (?@84.133.64.201) [INFO] Logout.

I'm a bit confused as to how someone can 'logout' when they haven't
logged in yet? However that's not really relevant..

> although the missing user name from pure-ftpd is not correct the message
> is not 'critical', or?

I've never used pure-ftpd so I don't really know. Since this is being
logged as INFO it's /probably/ not anything significant.

Added the following (updated) rule to CVS:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pure-ftpd:
\([\?.[:alnum:]-]+@[._[:alnum:]-]+\) \[INFO\] Logout.$

Thanks,

-- 
-jamie <jamie at silverdream.org> | spamtrap: spam at silverdream.org
 w: http://www.silverdream.org | p: sms at silverdream.org
 pgp key @ http://silverdream.org/~jps/pub.key
 21:30:02 up 17 min,  2 users,  load average: 2.65, 2.52, 1.58

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20050215/966e2545/attachment.pgp