Hi,

We use these rules for atftpd messages:

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ atftpd\[[[:digit:]]+\]:
timeout: retrying...$ ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+
atftpd\[[[:digit:]]+\]: Fetching from
([[:digit:]]{1,3}\.){3}[[:digit:]]{1,3} to [[:alnum:]\.-]+$

HTH

Hendrik

It's a shame no-one replied since 2010 -- let's change that:

Is there still interest in adding these rules to logcheck? if so, are
the rules up-to-date?
i dont object to adding these, but given ftp has declined i wonder if
there is demand for this any more?



A check against https://salsa.debian.org/debian/atftp would be great,
but a reply that this is still useful is enough)