Your message dated Thu, 15 Apr 2010 17:17:14 +0000
with message-id <e1o2sgk-0000se...@ries.debian.org>
and subject line Bug#575378: fixed in logcheck 1.3.8
has caused the Debian Bug report #575378,
regarding logcheck-database: ignore.d.server/nfs does not allow underscore in
mount points
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
575378: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=575378
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: logcheck-database
Version: 1.2.68
Severity: minor
This is also present in the current squeeze/sid version 1.3.7
For weeks I have been slowly driven mad by logcheck continually
reporting innocuous nfs mount/umount events and I could not see why
they were not being removed by the nfs ignore rules.
Finally I spotted the issue: the mount path listed in the log message
contains an underscore, so doesn't quite match the regexp. Attached is
the very simple patch that allows [._[:alnum:]-]* in path elements.
-- System Information:
Debian Release: 5.0.4
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.18-5-xen-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
-- debconf-show failed
--- nfs 2010-03-25 10:47:47.000000000 +0000
+++ nfs.orig 2010-03-25 10:47:00.000000000 +0000
@@ -1,2 +1,2 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rpc\.mountd: authenticated (un|)mount
request from [._[:alnum:]-]+:[0-9]+ for (/[._[:alnum:]-]*)+
\((/[._[:alnum:]-]*)+\)$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ mountd\[[0-9]+\]: authenticated (un|)mount
request from [._[:alnum:]-]+:[0-9]+ for (/[._[:alnum:]-]*)+
\((/[._[:alnum:]-]*)+\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rpc\.mountd: authenticated (un|)mount
request from [._[:alnum:]-]+:[0-9]+ for (/[[:alnum:]]*)+ \((/[[:alnum:]]*)+\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ mountd\[[0-9]+\]: authenticated (un|)mount
request from [._[:alnum:]-]+:[0-9]+ for (/[[:alnum:]]*)+ \((/[[:alnum:]]*)+\)$
--- End Message ---
--- Begin Message ---
Source: logcheck
Source-Version: 1.3.8
We believe that the bug you reported is fixed in the latest version of
logcheck, which is due to be installed in the Debian FTP archive:
logcheck-database_1.3.8_all.deb
to main/l/logcheck/logcheck-database_1.3.8_all.deb
logcheck_1.3.8.dsc
to main/l/logcheck/logcheck_1.3.8.dsc
logcheck_1.3.8.tar.gz
to main/l/logcheck/logcheck_1.3.8.tar.gz
logcheck_1.3.8_all.deb
to main/l/logcheck/logcheck_1.3.8_all.deb
logtail_1.3.8_all.deb
to main/l/logcheck/logtail_1.3.8_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 575...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Hannes von Haugwitz <han...@vonhaugwitz.com> (supplier of updated logcheck
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160
Format: 1.8
Date: Wed, 14 Apr 2010 13:43:17 +0200
Source: logcheck
Binary: logcheck logcheck-database logtail
Architecture: source all
Version: 1.3.8
Distribution: unstable
Urgency: low
Maintainer: Debian logcheck Team <logcheck-devel@lists.alioth.debian.org>
Changed-By: Hannes von Haugwitz <han...@vonhaugwitz.com>
Description:
logcheck - mails anomalies in the system logfiles to the administrator
logcheck-database - database of system log rules for the use of log checkers
logtail - Print log file lines that have not been read (deprecated)
Closes: 575378
Changes:
logcheck (1.3.8) unstable; urgency=low
.
[ Hannes von Haugwitz ]
* src/logcheck-test:
- removed useless trap signal 16
* ignore.d.workstation/wpasupplicant:
- allow '_' in id_str of CTRL-EVENT-CONNECTED message
- added rules for wpa_action messages
* ignore.d.workstation/kernel:
- "Mode Sense" is hexadecimal, not just decimal
- ignore "usb-storage" message
* ignore.d.server/kernel:
- ignore "using internal journal" message
- adjusted rule to match EXT3-fs and writeback data mode
* ignore.d.server/bind:
- added rule to ignore "success resolving" messages
* ignore.d.server/nfs:
- allow '_', '-' and '.' in mount path, thanks to
G. T. Laycock (closes: #575378)
* ignore.d.server/nagios:
- allow '>=' in "SERVICE FLAPPING ALERT" message
- added rule to ignore "HOST FLAPPING ALERT" message
* src/logcheck:
- look for {header,footer}.txt in $RULEDIR, thanks to Kerstin Puschke
- cd to $STATEDIR before cleaning up temp dir, thanks to Kerstin Puschke
- fixed stream redirection of hostname command,
thanks to Bob Proulx (see #574858)
* ignore.d.server/dnsmasq:
- adjusted rule to also match '-dhcp' suffix in dhcp subsystem messages,
thanks to Michał Sawicz
* Switch to dpkg-source 3.0 (native) format
.
[ Gerfried Fuchs ]
* debian/logcheck.NEWS, debian/logtail.NEWS:
- removed asterisk from entries
* docs/logcheck-test.1, docs/logtail.8, docs/logtail2.8:
- escaped dashes that really mean dashes
.
[ Hanspeter Kunz ]
* ignore.d.server/dovecot:
- ignore more failed and aborted logins
- msgid's may contain colons
- ignore discarded vacation responses (bulk, auto-submited, duplicates)
- ignore duplicate forwards
- ignore more "Connection closed" messages
- ignore "Too many invalid IMAP commands"
- ignore more "Connection closed" messages (MANAGESIEVE)
- ignore aborted authentications
* ignore.d.server/postfix:
- ignore disconnects during EHLO (and not only HELO) handshakes
- merged 5 similar "lost connection" rules into one
* ignore.d.server/kernel: ignore imklog startup messages
Checksums-Sha1:
ebe29decec6e407bb1ef01cbedb398780f6b281a 1274 logcheck_1.3.8.dsc
808bf8ee032b650a5b53ad1c6893f592c8428457 155738 logcheck_1.3.8.tar.gz
2326993f8732ba245d9e8b3f90998c61295e7d31 75126 logcheck_1.3.8_all.deb
468e3beee3bdd3a795504b8c3af73816d28273a6 116182 logcheck-database_1.3.8_all.deb
908b64adb314e5c31bbc7f6aa90d0e76ac9e95f5 58088 logtail_1.3.8_all.deb
Checksums-Sha256:
2d3fefc67aadf79389f8a4a2868e4d0cc62795d6c6f7f68c09ef20942265c049 1274
logcheck_1.3.8.dsc
c263daff2250b7b72cac711ae70a0e7168091967bcde41114a182fcdd88fdce7 155738
logcheck_1.3.8.tar.gz
d99c21b6d2b1b5724102255e3681467668fc2fbe38f227f69cfa130f26900394 75126
logcheck_1.3.8_all.deb
152ce1d4e07676fef346c0639ae5dd9cecd3f055894eaaecccca1271f1f9c811 116182
logcheck-database_1.3.8_all.deb
6414d7329cf3eefbcc881a7fe32c5d710386515be983b92f20041181a486bdd9 58088
logtail_1.3.8_all.deb
Files:
9347cc394a91d79324c08c7a56450f2d 1274 admin optional logcheck_1.3.8.dsc
86ea9f35183f28f95deb0aba509efb61 155738 admin optional logcheck_1.3.8.tar.gz
e469df35725ea44945b3ad39636d4e3f 75126 admin optional logcheck_1.3.8_all.deb
6c913285db5c4f03b2615f9542bfafd5 116182 admin optional
logcheck-database_1.3.8_all.deb
6629bceb0f9855e33b007233dbe7512c 58088 admin optional logtail_1.3.8_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEAREDAAYFAkvHR6kACgkQIgvIgzMMSnUwNgCgtdnnyxwLtRc+pju0r5PZbkcD
gh4An1DhNfTcYdxI/LjasHe4YnyiPBmz
=NfDt
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
Logcheck-devel mailing list
Logcheck-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel
