[Logwatch-Devel] Some unmatched entries

Jorrit Schippers - nCode jorrit at ncode.nl
Sun Jan 22 05:10:32 MST 2006


Could the following unmatched entries be supported by logwatch? They appear
frequently in my logfiles:

Found decoder for    (...)  at (....) eg: Found decoder for    .tar  at

Blocked CLEAN, [] [] <sender at somehost.com> ->
<receiver at somehost.com>, Message-ID: <msgid>, mail_id: mailid, Hits: -, xxx

    Disconnected, ip=[::ffff:], time=0: 1 Time(s)
    Unexpected SSL connection shutdown.: 229 Time(s)
    couriertls: read: Connection reset by peer: 5 Time(s)

    Disconnected, ip=[::ffff:]: 36 Time(s)
    Disconnected, ip=[::ffff:]: 8 Time(s)
    LOGIN FAILED, user=antti, ip=[::ffff:]: 8 Time(s)
    LOGIN FAILED, user=user at somehost.com, ip=[::ffff:]: 36
    Unexpected SSL connection shutdown.: 1 Time(s)

 statistics: start interval Jan 21 00:48:58
 statistics: domain lookup hits=0 miss=3 success=0%
 statistics: address lookup hits=0 miss=6 success=0%

 su[18884]: + ??? root-root
 webmin[17735]: Invalid login as root from
 webmin[17755]: Successful login as root from
 su[20413]: + pts/1 user-root
 su[20582]: Authentication failed for root
 su[20582]: - pts/2 user-root
 su[20586]: + pts/2 user-root
 webmin[29303]: Timeout of session for root 

Thanks in advance,

Jorrit Schippers
jorrit at ncode.nl

More information about the Logwatch-Devel mailing list