This file is indexed.

/usr/share/logwatch/scripts/services/in.qpopper is in logwatch 7.4.1-2.

This file is owned by root:root, with mode 0o755.

The actual contents of the file can be viewed below.

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
#!/usr/bin/perl

##########################################################################
# $Id: in.qpopper 150 2013-06-18 22:19:38Z mtremaine $
##########################################################################

########################################################
# This was written and is maintained by:
#    Kenneth Porter <shiva@well.com>
#
# Please send all comments, suggestions, bug reports,
#    etc, to shiva@well.com.
########################################################

#####################################################
## Copyright (c) 2008 Kenneth Porter
## Covered under the included MIT/X-Consortium License:
##    http://www.opensource.org/licenses/mit-license.php
## All modifications and contributions by other persons to
## this script are assumed to have been donated to the
## Logwatch project and thus assume the above copyright
## and licensing terms.  If you want to make contributions
## under your own copyright or a different license this
## must be explicitly stated in the contribution an the
## Logwatch project reserves the right to not accept such
## contributions.  If you have made significant
## contributions to this script and want to claim
## copyright please contact logwatch-devel@lists.sourceforge.net.
#########################################################

$Detail = $ENV{'LOGWATCH_DETAIL_LEVEL'} || 0;

while (defined($ThisLine = <STDIN>)) {
    if ( ($ThisLine =~ /xsender/) or
         ( $ThisLine =~ /.drac.:/ ) or
         ( $ThisLine =~ /Timing/ ) or
         ( $ThisLine =~ /-ERR \[AUTH\]/ ) or
         ( $ThisLine =~ /canonical name of client/ ) or
         ( $ThisLine =~ /I\/O error flushing output to client/ ) or
         ( $ThisLine =~ /-ERR SIGHUP or SIGPIPE flagged/ ) or
         ( $ThisLine =~ /-ERR POP hangup/ ) or
         ( $ThisLine =~ /-ERR POP EOF or I\/O Error/ ) or
         ( $ThisLine =~ /-ERR \[IN-USE\] / ) or
         ( $ThisLine =~ /Incorrect octet count/ ) ) {
        # We don't care about these
    }
    ## Stats: <UserID> 0 0 0 0 <Host> <IP>
    elsif (($UserID, $NumDeleted, $BytesDeleted, $NumLeft, $BytesLeft) = ( $ThisLine =~ /Stats: ([^ ]+) ([^ ]+) ([^ ]+) ([^ ]+) ([^ ]+)/ )) {
        $Stats{$UserID}{"Times"}++;
        $Stats{$UserID}{"NumDel"} += $NumDeleted;
        $Stats{$UserID}{"BytesDel"} += $BytesDeleted;
        $Stats{$UserID}{"NumLeft"} = $NumLeft;
        $Stats{$UserID}{"BytesLeft"} = $BytesLeft;
    }
    elsif (($UserID) = ($ThisLine =~ /^\[AUTH\] Failed attempted login to ([^ ]+) from host/ )) {
        $FailedLogin{$UserID}++;
    }
    elsif ( $ThisLine =~ s/^connect from ([^ ]+)$/$1/ ) {
        $Connections{$ThisLine}++;
    }
    elsif ( $ThisLine =~ s/^\(v[0-9.]+\) POP login by user "?[^ ]+"? at \([^ ]+\) ([^ ]+)$/$1/ ) {
        $Connections{$ThisLine}++;
    }
    elsif ( $ThisLine =~ s/^apop \"(.*)\".*/$1/ ) {
        $ApopConnections{$ThisLine}++;
    }
    else {
        # Report any unmatched entries...
        chomp($ThisLine);
        $OtherList{$ThisLine}++;
    }
}

if ( (keys %Connections) and ($Detail >= 10) ) {
    print "\nPlaintext Connections:\n";
    foreach $ThisOne (keys %Connections) {
        print "   " . $Connections{$ThisOne} . " from " . $ThisOne;
    }
}

if ( (keys %ApopConnections) and ($Detail >= 10) ) {
    print "\nAPOP Connections:\n";
    foreach $ThisOne (keys %ApopConnections) {
        print "   " . $ApopConnections{$ThisOne} . " from " . $ThisOne;
    }
}

if ((keys %Stats) and ($Detail >= 10)) {
    print "\nUser Statistics:\n";
    print "                        |     Deleted    |      Kept      |\n";
    print "User Name        Times  |   Num  KBytes  |   Num  KBytes  |\n";
    foreach $UserID (sort {$Stats{$b}{"BytesDel"}<=>$Stats{$a}{"BytesDel"}} keys %Stats)
    {
        printf("%-15s  %5d  | %5d  %6d  | %5d  %6d  |\n", $UserID, $Stats{$UserID}{"Times"}, $Stats{$UserID}{"NumDel"}, $Stats{$UserID}{"BytesDel"}/1024, $Stats{$UserID}{"NumLeft"}, $Stats{$UserID}{"BytesLeft"}/1024);
        $Times += $Stats{$UserID}{"Times"};
        $NumDel += $Stats{$UserID}{"NumDel"};
        $BytesDel += $Stats{$UserID}{"BytesDel"};
        $NumLeft += $Stats{$UserID}{"NumLeft"};
        $BytesLeft += $Stats{$UserID}{"BytesLeft"};
    }
    print "------------------------+----------------+----------------+\n";
    printf("TOTALS           %5d  | %5d  %6d  | %5d  %6d  |\n", $Times, $NumDel, $BytesDel/1024, $NumLeft, $BytesLeft/1024);
}

if (keys %FailedLogin) {
   print "\nFailed Logins:\n";
   foreach $UserID (sort {$FailedLogin{$b}<=>$FailedLogin{$a} } keys %FailedLogin) {
      print "  $UserID: $FailedLogin{$UserID} time(s).\n";
   }; # foreach
}; # if

if (keys %OtherList) {
   print "\n**Unmatched Entries**\n";
   foreach $line (sort {$OtherList{$b}<=>$OtherList{$a} } keys %OtherList)
   {
      print "   $line: $OtherList{$line} Time(s)\n";
   }
}

exit(0);

# vi: shiftwidth=3 tabstop=3 syntax=perl et
# Local Variables:
# mode: perl
# perl-indent-level: 3
# indent-tabs-mode: nil
# End: