[Logcheck-devel] Re: so, about preprocessing... (#376106)
martin f krafft
madduck at debian.org
Tue Jul 4 15:34:49 UTC 2006
also sprach martin f krafft <madduck at debian.org> [2006.07.04.0052 +0200]:
> @LEAD@ @PROC_SMTP@: @QUEUE_ID@: @TO@, relay=@DNIP@, @DELAY@,
> @DSNS@, status=deliverable \(@SMTP_SSTATUS@ recipient @EMAIL@
> ok\)@EOL@
I just noticed
http://marc.theaimsgroup.com/?l=logcheck-devel&m=114076370327806&w=2
and the fact that Eric Evans already had this idea a year before me.
I apologise for not having done my research, at least we have two
implementations now (and we both use @VAR@ syntax).
Anyway there's one difference: Eric proposes to compile rules files,
I propose to parse rules at run-time. If I look at
> ^[[:upper:]][[:alpha:]]{2} ([[:digit:]]{2}| [[:digit:]])
> ([[:digit:]]{2}:){2}[[:digit:]]{2} seamus
> postfix/smtp\[[[:digit:]]{1,5}\]: (NOQUEUE|[A-F[:digit:]]+):
> to=<([-_.+=[:alnum:]]+@[-_.[:alnum:]]+|[[:alnum:]]+)>(,
> orig_to=<([-_.+=[:alnum:]]+@[-_.[:alnum:]]+|[[:alnum:]]+)>)?,
> relay=([-_.[:alnum:]]+|([[:digit:]]{1,3}\.){3}[[:digit:]]{1,3}|unknown)\[([[:digit:]]{1,3}\.){3}[[:digit:]]{1,3}\](:[[:digit:]]{1,5})?,
> delay=[[:digit:]]+(\.[[:digit:]]+)?,
> delays=([[:digit:]]+(\.[[:digit:]]+)?/){3}[[:digit:]]+(\.[[:digit:]]+)?,
> dsn=2\.[[:digit:]]+\.[[:digit:]]+, status=deliverable
> \(2[[:digit:]]{2} recipient
> <([-_.+=[:alnum:]]+@[-_.[:alnum:]]+|[[:alnum:]]+)> ok\)$
then I am moderately sure that a user or even our humble selfs will
prefer to read the more abstract variable-using syntax instead.
I am really in favour of this and would start to implement run-time
translation as soon as I hear people who're also in favour.
--
.''`. martin f. krafft <madduck at debian.org>
: :' : proud Debian developer and author: http://debiansystem.info
`. `'`
`- Debian - when you have better things to do than fixing a system
"let me take you down, 'cause i'm going to strawberry fields.
nothing is real and nothing to get hungabout.
strawberry fields forever."
-- the beatles
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature (GPG/PGP)
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20060704/9fdbfdd0/attachment.pgp
More information about the Logcheck-devel
mailing list