[Logwatch-Devel] Some unmatched entries

Jorrit Schippers - nCode jorrit at ncode.nl
Sun Jan 22 05:10:32 MST 2006


Hello,

Could the following unmatched entries be supported by logwatch? They appear
frequently in my logfiles:

Amavis:
Found decoder for    (...)  at (....) eg: Found decoder for    .tar  at
/bin/cpio

Blocked CLEAN, [123.123.123.123] [111.222.111.222] <sender at somehost.com> ->
<receiver at somehost.com>, Message-ID: <msgid>, mail_id: mailid, Hits: -, xxx
ms

Imap:
    Disconnected, ip=[::ffff:123.123.123.123], time=0: 1 Time(s)
    Unexpected SSL connection shutdown.: 229 Time(s)
    couriertls: read: Connection reset by peer: 5 Time(s)

Pop3:
    Disconnected, ip=[::ffff:123.123.123.123]: 36 Time(s)
    Disconnected, ip=[::ffff:123.123.123.123]: 8 Time(s)
    LOGIN FAILED, user=antti, ip=[::ffff:123.123.123.123]: 8 Time(s)
    LOGIN FAILED, user=user at somehost.com, ip=[::ffff:123.123.123.123]: 36
Time(s)
    Unexpected SSL connection shutdown.: 1 Time(s)

Postfix:
 statistics: start interval Jan 21 00:48:58
 statistics: domain lookup hits=0 miss=3 success=0%
 statistics: address lookup hits=0 miss=6 success=0%

Secure-log
 su[18884]: + ??? root-root
 webmin[17735]: Invalid login as root from 123.123.123.123
 webmin[17755]: Successful login as root from 123.123.123.123
 su[20413]: + pts/1 user-root
 su[20582]: Authentication failed for root
 su[20582]: - pts/2 user-root
 su[20586]: + pts/2 user-root
 webmin[29303]: Timeout of session for root 

Thanks in advance,


Jorrit Schippers
jorrit at ncode.nl


More information about the Logwatch-Devel mailing list