tag 296014 pending thanks On Sat, 2005-02-19 at 19:05 +0100, Ingo Theiss wrote: > the courier-pop pattern for 'DISCONNECTED' does not match the following > message: > > Feb 17 18:25:58 backup courierpop3login: DISCONNECTED, > [EMAIL PROTECTED], ip=[::ffff:111.111.111.111], top=0, retr=0, > time=5 > > seems like a typo prevents a match! here is the pattern from > courier-pop: > > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ courierpop3login: > (LOGOUT|TIMEOUT|DISCONNECTD), [EMAIL PROTECTED]:alnum:]]+, > ip=\[[.:[:alnum:]]+\], top=[0-9]+, retr=[0-9]+, time=[0-9]+(, stls=1)?$ > > there is en 'E' missing in 'DISCONNECTD'!
I couldn't find this rule anywhere, however I've added the following rule to CVS which matches the log message you gave: ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ courierpop3login: (TIMEOUT| DISCONNECTED), [EMAIL PROTECTED]:alnum:]]+, ip=\[[.:[:alnum:]]+\], top=[[:digit:]]+, retr=[[:digit:]]+, time=[[:digit:]]+$ Thanks for your report, -- -jamie <[EMAIL PROTECTED]> | spamtrap: [EMAIL PROTECTED] w: http://www.silverdream.org | p: [EMAIL PROTECTED] pgp key @ http://silverdream.org/~jps/pub.key 21:30:02 up 17 min, 2 users, load average: 2.65, 2.52, 1.58
signature.asc
Description: This is a digitally signed message part