[Logcheck-devel] Bug#367781: logcheck-database: postfix/smtp read timeout (port 25) regexp wrong

[Tim Potter]

Package: logcheck-database
Version: 1.2.39
Severity: normal


The rule for postfix/smtp read timeout (port 25) doesn't match the
actual log message:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: connect to [^[:space:]]+ \[[.0-9]+\]: read timeout \(port 25\)$

A sample log line is:

May 17 17:38:16 dp postfix/smtp[12256]: connect to smtpv1.ihs.gov[198.45.3.65]: read timeout (port 25)

It looks like there shouldn't be a space between the [^[:space:]]+ to
match the hostname and the \[[.0-9]+\] to match the IP address enclosed
in square brackets.


Regards,

Tim.

-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.4.26
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0]         1.4.30.13  Debian configuration management sy

-- debconf information:
* logcheck-database/conffile-cleanup: true
* logcheck-database/rules-directories-note:
* logcheck-database/security_level: server
* logcheck-database/standard-rename-note: