Logwatch Proftpd Login Time Out Exceeded

Hello List,

Happy New Year and belated Merry Christmas!

I have been getting proftpd's "login time out exceeded" sorted out into unmatched entries like this:

**Unmatched Entries**
proftpd[4378] 1.2.3.4: ProFTPD 1.3.4a (maint) (built Thu Sep 4 2014 14:41:08 UTC) standalone mode STARTUP
proftpd[6049] 1.2.3.4 (61.240.144.66[61.240.144.66]): Login timeout exceeded, disconnected

I modified the script to have these entries match by adding the following lines of code:

elsif ( ($Host) = ( $ThisLine =~ /\(((.*)\[(.*)\])\)(?:\:| \-) Login timeout exceeded, disconnected/ ) ) {
      $LoginTimeout{$Host}++; }

if ( (keys %LoginTimeout) and ($Detail >= 5) ) {
   print "\nLogin time out exceeded:\n";
   foreach $Host (sort {$a cmp $b} keys %LoginTimeout) {
      print "   $Host : $LoginTimeout{$Host} Time(s)\n";
   }
}

Now the unmatched entries have been defined and have 'moved' from unmatched to matched ones and the script reports them as follows:

Login time out exceeded:
   61.240.144.66[61.240.144.66] : 1 Time(s)

However, I cannot seem to fix the unmatched part because now I have them both reported like this:

Login time out exceeded:
   61.240.144.66[61.240.144.66] : 1 Time(s)

and

**Unmatched Entries**
proftpd[4378] 1.2.3.4: ProFTPD 1.3.4a (maint) (built Thu Sep 4 2014 14:41:08 UTC) standalone mode STARTUP
proftpd[6049] 1.2.3.4 (61.240.144.66[61.240.144.66]): Login timeout exceeded, disconnected

I would highly appreciate it if somebody could give me a few pointers on how to 'remove' the newly defined/matched entries from the unmatched list. Many thanks in advance!

Regards,
Dennis

------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net

_______________________________________________
Logwatch-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/logwatch-devel