On Tue, May 19, 2009 at 12:07:59AM +0200, Patrik Wallstrom wrote: > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp?\[[0-9]+\]: setting up TLS > connection (to|from) [._[:alnum:]-]+(\[[0-9a-f.:]{3,39}\]\:25)?$ > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp?\[[0-9]+\]: (Trusted )?TLS > connection established (to|from) [^[:space:]]+: (TLSv1|SSLv[23]) with cipher > [^[:space:]]+ \([/0-9]+ bits\)$
Similar rules were already present in logcheck-database; the only differences I could see are the presence of a port number in the first rule, and "Trusted" in the second. I've therefore committed these additions. -- < DanielS> still, throne of blood sounds like a movie about overfiend and virgins or some crap -- in #debian-devel _______________________________________________ Logcheck-devel mailing list Logcheck-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel