From d08d7c7d120376784f07cf1ff31db1aef4766cfc Mon Sep 17 00:00:00 2001 From: Jonas Smedegaard Date: Wed, 7 May 2003 10:25:07 +0000 Subject: Ignore successful logins to proftpd. --- logcheck/ignore.d.server/local | 2 +- logcheck/ignore.d.server/proftpd | 2 +- logcheck/ignore.d.workstation/local | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/logcheck/ignore.d.server/local b/logcheck/ignore.d.server/local index 05dd830..452261d 100644 --- a/logcheck/ignore.d.server/local +++ b/logcheck/ignore.d.server/local @@ -272,7 +272,7 @@ chat\[[0-9]+\]: send \(\\d\)$ ### ignore.d.server/proftpd proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - FTP session (closed|opened)\. $ proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - FTP login timed out, disconnected\. $ -proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - USER [^[:space:]]+: no such user found from .*\[[\.0-9]+\] to [\.0-9]+:21 $ +proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - USER [^[:space:]]+: (Login successful\.|no such user found from .*\[[\.0-9]+\] to [\.0-9]+:21) $ proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - no such user '[^[:space:]]+' $ proftpd\[[0-9]+\]: connect from [\.0-9]+ $ proftpd\[[0-9]+\]: No certificate files found! $ diff --git a/logcheck/ignore.d.server/proftpd b/logcheck/ignore.d.server/proftpd index 4a900ad..d4a58df 100644 --- a/logcheck/ignore.d.server/proftpd +++ b/logcheck/ignore.d.server/proftpd @@ -1,6 +1,6 @@ proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - FTP session (closed|opened)\. $ proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - FTP login timed out, disconnected\. $ -proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - USER [^[:space:]]+: no such user found from .*\[[\.0-9]+\] to [\.0-9]+:21 $ +proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - USER [^[:space:]]+: (Login successful\.|no such user found from .*\[[\.0-9]+\] to [\.0-9]+:21) $ proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - no such user '[^[:space:]]+' $ proftpd\[[0-9]+\]: connect from [\.0-9]+ $ proftpd\[[0-9]+\]: No certificate files found! $ diff --git a/logcheck/ignore.d.workstation/local b/logcheck/ignore.d.workstation/local index 83aebf7..772aa6f 100644 --- a/logcheck/ignore.d.workstation/local +++ b/logcheck/ignore.d.workstation/local @@ -272,7 +272,7 @@ chat\[[0-9]+\]: send \(\\d\)$ ### ignore.d.server/proftpd proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - FTP session (closed|opened)\. $ proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - FTP login timed out, disconnected\. $ -proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - USER [^[:space:]]+: no such user found from .*\[[\.0-9]+\] to [\.0-9]+:21 $ +proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - USER [^[:space:]]+: (Login successful\.|no such user found from .*\[[\.0-9]+\] to [\.0-9]+:21) $ proftpd\[[0-9]+\]: [^[:space:]]+ \([^[:space:]\[]+\[[\.0-9]+\]\) - no such user '[^[:space:]]+' $ proftpd\[[0-9]+\]: connect from [\.0-9]+ $ proftpd\[[0-9]+\]: No certificate files found! $ -- cgit v1.2.3