Package: logcheck
Version: 1.3.8
Severity: normal
The new ssh in Squeeze now causes an additional line to be written by
sshd to the auth.log file:
May 14 12:13:33 localhost sshd[6940]: Received disconnect from 192.0.32.10:
11: disconnected by user
I suggest the following addition to the ignore.d.server/ssh rules.
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Received disconnect from
[^[:space:]]+: [0-9]+: disconnected by user
Thanks,
Bob
_______________________________________________
Logcheck-devel mailing list
Logcheck-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel
