[Bug 1058760] [NEW] unmatched entries for dovecot login

toby cabot toby at caboteria.org
Sat Sep 29 20:30:37 UTC 2012


Public bug reported:

Hi,

I've been getting a bunch of entries like this in my logwatch emails:
    hostname dovecot: imap-login: Login: user=<user>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=1014,
secured: 1 Time(s)

On a typical day I might get hundreds of such entries and my server is
only a small family server.

It looks as if the problem is in
/usr/share/logwatch/scripts/services/dovecot.  It seems to get confused
by the hostname coming after the datestamp and before the service name.
If I tweak the $ThisLine regex to match the hostname things work better,
but still not quite right.  I also had to add another login regex to
match the ones in my log.  I'll include a patch that works for me.

** Affects: logwatch (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to logwatch in Ubuntu.
https://bugs.launchpad.net/bugs/1058760

Title:
  unmatched entries for dovecot login

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/logwatch/+bug/1058760/+subscriptions



More information about the Ubuntu-server-bugs mailing list