tag 295254 pending thanks On Mon, 2005-02-14 at 19:40 +0100, Ingo Theiss wrote: > there is no pattern for 'Timeout' message without additional > information. the following message should be ignored to: > > Feb 14 17:23:15 web1 pure-ftpd: ([EMAIL PROTECTED]) [INFO] > Timeout
I've added the following rule to CVS, which matches that:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pure-ftpd:
\([.[:alnum:[EMAIL PROTECTED]:alnum:]-]+\) \[INFO\] Timeout$
> btw: isn't it better to provide ONE rule to ignore every message
> with '[INFO]'?
It's usually better to avoid broad rules like [INFO].*. For now, I'll
add the above rule and leave it as is and discuss it with the rest of
the logcheck team.
-j
--
-jamie <[EMAIL PROTECTED]> | spamtrap: [EMAIL PROTECTED]
w: http://www.silverdream.org | p: [EMAIL PROTECTED]
pgp key @ http://silverdream.org/~jps/pub.key
21:30:02 up 17 min, 2 users, load average: 2.65, 2.52, 1.58
signature.asc
Description: This is a digitally signed message part
