Package: logcheck Version: 1.2.34 Severity: normal the courier-pop pattern for 'DISCONNECTED' does not match the following message:
Feb 17 18:25:58 backup courierpop3login: DISCONNECTED, [EMAIL PROTECTED], ip=[::ffff:111.111.111.111], top=0, retr=0, time=5 seems like a typo prevents a match! here is the pattern from courier-pop: ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ courierpop3login: (LOGOUT|TIMEOUT|DISCONNECTD), [EMAIL PROTECTED]:alnum:]]+, ip=\[[.:[:alnum:]]+\], top=[0-9]+, retr=[0-9]+, time=[0-9]+(, stls=1)?$ there is en 'E' missing in 'DISCONNECTD'! thanks once again! regards, ingo -- System Information: Debian Release: 3.1 APT prefers testing APT policy: (990, 'testing') Architecture: i386 (i686) Kernel: Linux 2.4.26 Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages logcheck depends on: ii adduser 3.59 Add and remove users and groups ii cron 3.0pl1-86 management of regular background p ii debconf [debconf 1.4.30.11 Debian configuration management sy ii debianutils 2.8.4 Miscellaneous utilities specific t ii exim4-daemon-hea 4.34-10 Exim (v4) with extended features, ii lockfile-progs 0.1.10 Programs for locking and unlocking ii logcheck-databas 1.2.34 A database of system log rules for ii logtail 1.2.34 Print log file lines that have not ii mailx 1:8.1.2-0.20040524cvs-4 A simple mail user agent ii sysklogd [system 1.4.1-16 System Logging Daemon -- debconf information: logcheck/changes: * logcheck/install-note: -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]