SF.net SVN: logwatch:[91] scripts/services/dovecot

[email protected]
Newsgroups gmane.comp.log.logwatch.devel
Message-ID <[email protected]>
Revision: 91
          http://logwatch.svn.sourceforge.net/logwatch/?rev=91&view=rev
Author:   mtremaine
Date:     2012-04-14 15:15:44 +0000 (Sat, 14 Apr 2012)
Log Message:
-----------
Tried to cleanup some of the disconnects and none matches, also added Aborts for 1.+ -mgt

Modified Paths:
--------------
    scripts/services/dovecot

Modified: scripts/services/dovecot
===================================================================
--- scripts/services/dovecot	2012-04-14 13:31:57 UTC (rev 90)
+++ scripts/services/dovecot	2012-04-14 15:15:44 UTC (rev 91)
@@ -223,23 +223,22 @@
    } elsif ($ThisLine =~ /Disconnected in APPEND/) {
       $Disconnected{"in APPEND"}++;
    } elsif (($ThisLine =~ /Disconnected$/) or
-            (($Reason) = ($ThisLine =~ /pop3-login: Disconnected: (.+)/)) or
-            (($Reason) = ($ThisLine =~ /imap-login: Disconnected: (.+)/)) ) {
+            ($ThisLine =~ /(IMAP|POP3)\(.+\): Disconnected (bytes|top|rip|user|method)=/) or
+            ($ThisLine =~ /(imap\-login|pop3\-login): Disconnected: (bytes|top|rip|user|method)=/) ) { 
       $Disconnected{"no reason"}++;
-   } elsif ( (($Reason) = ($ThisLine =~ /POP3.+: Disconnected: (.+) top/)) or
-          (($Reason) = ($ThisLine =~ /pop3-login: Disconnected \((.+)\): /)) or
-          (($Reason) = ($ThisLine =~ /IMAP.+: Disconnected: (.+) bytes=/i)) or
+   } elsif ( (($Reason) = ($ThisLine =~ /(?:IMAP|POP3).+: Disconnected: (.+) (bytes|top)=/i)) or
+          (($Reason) = ($ThisLine =~ /(?:imap\-login|pop3\-login): Disconnected: \(?(.+)\)?: /)) or
+            #This one should go away also -mgt
           (($Reason) = ($ThisLine =~ /IMAP.+: Disconnected: (.+)/i)) ) {
       $Disconnected{$Reason}++;
-   } elsif (($Reason) = ($ThisLine =~ /(IMAP|POP3).+: Connection closed (top|bytes)=/i))  {
+   } elsif ($ThisLine =~ /(IMAP|POP3).+: Connection closed (top|bytes)=/i) {
         $ConnectionCl{"no reason"}++;
-   } elsif ( (($Reason) = ($ThisLine =~ /IMAP.+: Connection closed: (.*) bytes=/i)) or
-             (($Reason) = ($ThisLine =~ /POP3.+: Connection closed: (.*) (top=|bytes=)/i)) ) {
+   } elsif ( ($Reason) = ($ThisLine =~ /(?:IMAP|POP3).+: Connection closed: (.*) (?:bytes|method|top|rip|user)=/i) ) {
        $ConnectionCl{$Reason}++;
    } elsif ($ThisLine =~ /(IMAP|POP3).+: (Connection closed.*)/) {
       $Disconnected{$2}++;
-   } elsif ($ThisLine =~ /POP3.+: Connection closed top=.* retr=.* del=.* size=.*/i) {
-      $ConnectionCl{"no reason"}++;
+   } elsif (($Host) = ($ThisLine =~ /(?:imap\-login|pop3\-login): Aborted login: .*rip=(?:::ffff:)?(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})/) ) {
+      $Aborted{$Host}++;
    } elsif (($Error) = ($ThisLine =~ /child \d* (?:\(login\) )?returned error (.*)/)) {
    # dovecot: child 23747 (login) returned error 89
    # dovecot: log: Error: service(auth): child 19654 returned error 89 (Fatal failure)

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.


------------------------------------------------------------------------------
For Developers, A Lot Can Happen In A Second.
Boundary is the first to Know...and Tell You.
Monitor Your Applications in Ultra-Fine Resolution. Try it FREE!
http://p.sf.net/sfu/Boundary-d2dvs2
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.