--- a/irc.py	Tue May 06 16:14:12 2008 +0300
+++ b/irc.py	Sun Sep 14 23:02:19 2008 +0300
@@ -77,7 +77,7 @@
             return default
 
     def privmsg (self, user, channel, message) :
-        if message.lower().startswith(self.nickname.lower()) :
+        if message.lower().startswith(self.nickname.lower() + ':'):
             me, command = message.split(":", 1)
 
             args = command.strip().split()

--- a/logwatch_filters.py	Tue May 06 16:14:12 2008 +0300
+++ b/logwatch_filters.py	Sun Sep 14 23:02:19 2008 +0300
@@ -33,9 +33,15 @@
     def _filter (self, match) :
         return self.format % match.groupdict()
 
+_timestamp = "\w{3} [0-9 ]\d \d{2}:\d{2}:\d{2}"
+
 all = FullFilter("all")
 
-_timestamp = "\w{3} [0-9 ]\d \d{2}:\d{2}:\d{2}"
+all_wo_timestamps = SimpleFilter(
+    "all",
+    "^" + _timestamp + " (?P<line>.+)$",
+    "%(line)s"
+)
 
 sudo = SimpleFilter(
     "sudo",
@@ -50,7 +56,11 @@
 )
 
 cron_killer = NullFilter(
-        "^" + _timestamp + " \S+\s+CRON\[\d+\]: \(\w+\) session (opened|closed) for user \w+( by \(uid=\d+\))?$",
+        "^" + _timestamp + " \S+\s+(CRON|su)\[\d+\]: \(\w+\) session (opened|closed) for user \w+( by \(uid=\d+\))?$",
         re.IGNORECASE
 )
 
+su_nobody_killer = NullFilter(
+    "^" + _timestamp + " \S+\s+su\[\d+\]: (Successful su for nobody by root|\+ \?\?\? root:nobody)$",
+    re.IGNORECASE
+)