logwatch patches - dovecot
"gulikoza" <[email protected]>
| Newsgroups | gmane.comp.log.logwatch.devel |
|---|---|
| Message-ID | <[email protected]> |
Match more lines from dovecot to avoid inflating the report: Jun 20 21:35:13 localhost dovecot: POP3(gulikoza): Disconnected top=0/0, retr=0/0, del=0/323, size=548 Jun 21 00:00:48 localhost dovecot: pop3-login: Aborted login: user=<gulikoza>, method=PLAIN, rip=xx.xx.xx.xx, lip=192.168.0.1 Jun 21 10:35:08 localhost dovecot: pop3-login: Aborted login: rip=xx.xx.xx.xx, lip=192.168.0.1 Regards, gulikoza ------------------------------------------------------------------------------ This SF.net email is sponsored by Windows: Build for Windows Store. http://p.sf.net/sfu/windows-dev2dev _______________________________________________ Logwatch-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/logwatch-devel
logwatch-dovecot.patch
(application/octet-stream, 743 B)
diff --git a/scripts/services/dovecot b/scripts/services/dovecot
--- a/scripts/services/dovecot
+++ b/scripts/services/dovecot
@@ -260,8 +277,12 @@ while (defined($ThisLine = <STDIN>)) {
$Disconnected{$Reason}++;
} elsif (($Reason) = ($ThisLine =~ /Disconnected \((.*)\):/) ) {
$Disconnected{$Reason}++;
+ } elsif ($ThisLine =~ /Disconnected (bytes|top)=.*/) {
+ $Disconnected{"No reason"}++;
} elsif (($Reason, $Host) = ($ThisLine =~ /TLS initialization failed/) ) {
$TLSInitFail++;
+ } elsif (($Host) = ($ThisLine =~ /Aborted login:.*? rip=(.*),/) ) {
+ $Aborted{$Host}++;
} elsif (($Host) = ($ThisLine =~ /Aborted login \[(.*)\]/) ) {
$Host = hostName($Host);
$Aborted{$Host}++;