tag 296014 pending
thanks
On Sat, 2005-02-19 at 19:05 +0100, Ingo Theiss wrote:
> the courier-pop pattern for 'DISCONNECTED' does not match the following
> message:
>
> Feb 17 18:25:58 backup courierpop3login: DISCONNECTED,
> [EMAIL PROTECTED], ip=[::ffff:111.111.111.111], top=0, retr=0,
> time=5
>
> seems like a typo prevents a match! here is the pattern from
> courier-pop:
>
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ courierpop3login:
> (LOGOUT|TIMEOUT|DISCONNECTD), [EMAIL PROTECTED]:alnum:]]+,
> ip=\[[.:[:alnum:]]+\], top=[0-9]+, retr=[0-9]+, time=[0-9]+(, stls=1)?$
>
> there is en 'E' missing in 'DISCONNECTD'!
I couldn't find this rule anywhere, however I've added the following
rule to CVS which matches the log message you gave:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ courierpop3login: (TIMEOUT|
DISCONNECTED), [EMAIL PROTECTED]:alnum:]]+, ip=\[[.:[:alnum:]]+\],
top=[[:digit:]]+, retr=[[:digit:]]+, time=[[:digit:]]+$
Thanks for your report,
--
-jamie <[EMAIL PROTECTED]> | spamtrap: [EMAIL PROTECTED]
w: http://www.silverdream.org | p: [EMAIL PROTECTED]
pgp key @ http://silverdream.org/~jps/pub.key
21:30:02 up 17 min, 2 users, load average: 2.65, 2.52, 1.58
signature.asc
Description: This is a digitally signed message part

