Since 1.1 they have added new patterns and support more programs (including new dovecot logging format) List of changes since 1.1: - fix autoconf problem - automatically detect when ipfw supports IPv6 (thanks David Horn) - be sensitive to proftpd messages to auth facility, not daemon - add sshd pattern for "Bad protocol" and "Did not receive identif string" - support for Cyrus IMAP - support for SSH "possible break-in attempt" messages - updated support for dovecot to include logging format of new versions - fix detection of password when sshd doesn't log anything more than PAM
Bumped in cvs, thanks!