[Logwatch] Dropping CR/LF

jabbott at abbotts.org jabbott at abbotts.org
Tue Feb 21 09:13:46 MST 2006


This is my second try at posting here.  It looked like the first one did not go through.  If I double posted, my apologies.

I have logwatch setup today using the latest beta and I am trying to add some ignore.conf lines.  What happens is it seems to work fine if I have no lines, or just one line, in the ignore file.  If I add more than one line though, it turns the email that gets sent out into a block of text.  It is like the CR/LF gets dropped at the end of each log event and so they all run together.  Any idea on what is causing this? 

 **Unmatched Entries**
 Message forwarded from B339: sshd[122220]: Accepted password for tom from 10.2.1.179 port 3072 ssh2  Message forwarded from B339: sshd[109400]: subsystem request for sftp  Message forwarded from B339: sshd[136150]: Accepted password for dic from 10.2.4.129 port 3107 ssh2  Message forwarded from B339: sshd[89538]: subsystem request for sftp  Message forwarded from B339: sshd[118940]: Accepted password for tersta from 10.5.1.89 port 3140 ssh2  Message forwarded from B339: sshd[150594]: subsystem request for sftp  Message forwarded from A339: syslog: lft0: failed login attempt for UNKNOWN_USER  Message forwarded from B339: sshd[144534]: Accepted password for tesla from 10.1.1.79 port 1719 ssh2  Message forwarded from B339: sshd[159260]: subsystem request for sftp  Message forwarded from B339: sshd[77122]: Accepted password for dick from 10.8.5.7 port 2559 ssh2  Message forwarded from B339: sshd[153276]: subsystem request for sftp  Message forwarded from B339: sshd[138252]: Acc!
epted password for harry from 10.3.3.77 port 2592 ssh2  Message forwarded from B339: sshd[13850]: subsystem request for sftp  Message forwarded from B339: sshd[112794]: Accepted password for dude from 10.12.3.179 port 2627 ssh2  Message forwarded from B339: sshd[114630]: subsystem request for sftp  Message forwarded from B339: sshd[122914]: Accepted password for steve from 10.1.5.99 port 2672 ssh2  Message forwarded from B339: sshd[78462]: subsystem request for sftp  Message forwarded from B339: sshd[77178]: Accepted password for docMan from 10.1.6.29 port 2707 ssh2  Message forwarded from B339: sshd[125282]: subsystem request for sftp

--ja


-- 



More information about the Logwatch mailing list