Hi John,

> Mail sent by logcheck
> 
> ,----
> From: [EMAIL PROTECTED] (Cron Daemon)
> Subject: Cron <[EMAIL PROTECTED]>    if [ -x /usr/sbin/logcheck ]; then
> nice -n10 /usr/sbin/logcheck; fi
> To: [EMAIL PROTECTED]
> Date: Sun, 29 May 2005 18:02:09 -0400 (EDT)
> 
> egrep: Invalid content of \{\}
> `----

I can't reproduce this at all, which makes me think there's something
different on your system that is causing this bug.

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: WARNING: found
whitespace in HTTP header name {Cache Control: no-cache}$

With this rule, egrep parses it fine:

D: [1117469713] cleanchecked - dir - /tmp/logcheck.fb7dSc/ignore/spamd
D: [1117469713] cleanchecked - dir - /tmp/logcheck.fb7dSc/ignore/squid
D: [1117469714] cleanchecked - dir - /tmp/logcheck.fb7dSc/ignore/ssh

However, since there is nothing to lose by escaping the {}'s, I've
modified that rule in CVS.

-j

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to