[Logcheck-devel] Bug#732298: logcheck-database: dhclient diag message changed; updated rule to ignore it

2014-01-27 Thread Jonathan Wiltshire
Control: reassign -1 src:isc-dhcp-client
Control: retitle -1 incorporate logcheck snippets
Control: user debian-rele...@lists.debian.org
Control: usertag -1 bsp-2014-01-gb-Monmouth

Dear maintainer,

Logcheck is a package to filter system log events for the administrator.
Its aim is to remove chatter from the log files, leaving only the events
that the administrator needs to deal with. Filtering is for display only,
leaving the original log file intact for later reading.

Please ship snippets for consumption by the logcheck package. Logcheck
will stop shipping snippets for isc-dhcp-client in the future, so it's important
that isc-dhcp-client takes over these files.

If you use debhelper or CDBS, this is very simple:

1. provide your snippets in debian/package.logcheck.type
   where type is one of the following:
  violations
  violations.ignore
  ignore.workstation
  ignore.server
  ignore.paranoid
2. add a call to dh_installlogcheck in debian/rules, if you use debhelper
   without the automatic sequencer
3. add a versioned Breaks: logcheck-database (= 1.3.16~) to your control
   file

Please allow 7 days before uploading a package including these changes;
this is to give time for a superceding logcheck package to be prepared.
For your convenience, the current snippets (if any) are attached.

For further information, please see README.Maintainers in the logcheck
package.

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Internet 
(Software|Systems) Consortium DHCP Client [.[:alnum:]-]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Copyright [-0-9]+ 
Internet Systems Consortium\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: All rights reserved\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: For info, please visit 
http(://www\.isc\.org/(products/DHCP|sw/dhcp/)|s://www\.isc\.org/software/dhcp/)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: There is already a pid 
file /var/run/dhclient\.[[:alnum:]]+\.pid with pid [[:digit:]]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: killed old client 
process, removed PID file$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?:$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Listening on 
[^[:space:].]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Sending 
on[[:space:]]+[^[:space:]]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: DHCPDISCOVER on 
[[:alnum:].-]+ to [.0-9]{7,15} port 67 interval [0-9]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: DHCP(NAK|ACK|OFFER) (of 
[.0-9]{7,15} )?from [.0-9]{7,15}$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: DHCP(REQUEST|RELEASE) (of 
[.0-9]{7,15} )?on [[:alnum:].-]+ to [.0-9]{7,15} port 67$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: bound(:| to [.0-9]{7,15} 
--) renewal in [0-9]+ seconds\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: [[:lower:]]+[0-9]: 
unknown hardware address type [0-9]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Trying recorded lease 
[.0-9]{7,15}$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: No working leases in 
persistent database( - sleeping)?\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: send_packet: Network is 
unreachable$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: send_packet: please 
consult README file regarding broadcast address\.$
# dhcp-client 2.0
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Copyright (199[5-9],? 
){5}(The )?Internet Software Consortium\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Please contribute if you 
find this software useful\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: For info, please visit 
http://www.isc.org/dhcp-contrib.html$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: No DHCPOFFERS received\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Sleeping\.$
# 3.0
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient: parse_option_buffer: option 
[-[:alnum:]]+ \([[:digit:]]+\) larger than buffer\.$
___
Logcheck-devel mailing list
Logcheck-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/logcheck-devel

[Logcheck-devel] Bug#732298: logcheck-database: dhclient diag message changed; updated rule to ignore it

2013-12-16 Thread Dave Rutherford
Package: logcheck-database
Version: 1.3.15
Severity: normal
Tags: patch

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

[Apologies if this is a dup; I submitted yesterday but got no conf.
and don't see it at the online tracker.]

Configured in server mode, logcheck does not ignore messages such
as these -
Dec 15 06:40:14 bb dhclient: parse_option_buffer: malformed option
dhcp.smtp-server (code 69): option length exceeds option buffer length.
Dec 15 10:35:39 bb dhclient: parse_option_buffer: malformed option
dhcp.unknown (code 111): option length exceeds option buffer length.

There is a rule in ignore.server.d/dhclient which apparently is
intended to catch similar messages. My guess is that dhclient has
updated its text and logcheck didn't follow. The result can be
notifications when nothing truly relevant has happened.

This patch ignores the new error text as well as leaving the old match.


*** dhclient.diff
*** /etc/logcheck/ignore.d.server/dhclient.orig Sun Dec 15 13:53:55 2013
- --- /etc/logcheck/ignore.d.server/dhclientSun Dec 15 08:13:41 2013
***
*** 24,26 
- --- 24,27 
  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Sleeping\.$
  # 3.0
  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient: parse_option_buffer: option 
[-[:alnum:]]+ \([[:digit:]]+\) larger than buffer\.$
+ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient: parse_option_buffer: malformed 
option dhcp\.[-[:alnum:]]+ \(code [[:digit:]]+\): option length exceeds 
option buffer length\.$


- -- System Information:
Debian Release: 7.2
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash

- -- Configuration Files:
/etc/logcheck/ignore.d.server/dhclient changed [not included]

- -- no debconf information

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlKu+48ACgkQnN+41NpzKveJPACggiY0mpyfZmVYcF22cNiBnBl9
CH4AnRaqw78hQMuY7lD73vwKtb4bjHWg
=pEX4
-END PGP SIGNATURE-

___
Logcheck-devel mailing list
Logcheck-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/logcheck-devel