control: tags -1 + moreinfo thanks On Wed, 04 Jan 2012 09:58:11 +0100 Gabor Kiss <ki...@ssg.ki.iif.hu> wrote:
> /etc/logcheck/ignore.d.server/pure-ftpd rule > > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pure-ftpd: > \([._[:alnum:]-]+@[._[:alnum:]-]+\) \[INFO\] Logout\.$ > > does not cover log entry > > Jan 4 07:23:42 gatling pure-ftpd: (?@203.158.197.21) [INFO] Logout. > > The problem is with ? before @. It's a shame no-one replied to this bug from 2012 Is there still interest in adding this rule, and is the above still valid? is the above message really harmless? it the bit before the @ is meant to be a username then it looks like something fishy is going on and this message should not be filtered?