Thomas Hood
2005-Apr-02 10:10 UTC
[Logcheck-devel] Bug#302678: Addition ignore line for dnsmasq
Package: logcheck-database
Version: 1.2.35
Severity: wishlist
Tags: patch
Here is a patch to make logcheck ignore a routine message that dnsmasq
prints when resolvconf is installed.
Perhaps the two "reading ... resolv.conf" lines can be collapsed into
one but I will let you implement that. :)
--- /etc/logcheck/ignore.d.server/dnsmasq_ORIG 2005-01-08 11:00:37.000000000
+0100
+++ /etc/logcheck/ignore.d.server/dnsmasq 2005-04-02 12:05:34.000000000 +0200
@@ -1,5 +1,6 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: read /etc/hosts -
[[:digit:]]+ addresses$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: reading
/etc/resolv.conf$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: reading
/var/run/dnsmasq/resolv.conf$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: using nameserver
[.[:digit:]#]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]:
(DHCPDISCOVER|DHCPOFFER|DHCPREQUEST|DHCPACK|DHCPRELEASE|DHCPINFORM|BOOTP)\([[:alnum:]]+\)
[ :[:alnum:]._-]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: ignoring nameserver
127\.0\.0\.1 - local interface$
-- System Information:
Debian Release: 3.1
APT prefers testing
APT policy: (500, 'testing'), (50, 'unstable'), (1,
'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.11
Locale: LANG=en_IE at euro, LC_CTYPE=en_IE at euro (charmap=ISO-8859-15)
Versions of packages logcheck-database depends on:
ii debconf [debconf-2.0] 1.4.32 Debian configuration management sy
-- debconf information:
* logcheck-database/rules-directories-note:
* logcheck-database/standard-rename-note:
* logcheck-database/conffile-cleanup: true
* logcheck-database/security_level: workstation
maximilian attems
2005-Apr-02 20:02 UTC
Bug#302678: [Logcheck-devel] Bug#302678: Addition ignore line for dnsmasq
tags 302678 pending thanks On Sat, 02 Apr 2005, Thomas Hood wrote:> Here is a patch to make logcheck ignore a routine message that dnsmasq > prints when resolvconf is installed.thanks for the info.> Perhaps the two "reading ... resolv.conf" lines can be collapsed into > one but I will let you implement that. :)would have been easier with message ;) but that should do it: ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: reading /etc/(run/dnsmasq/)?resolv.conf$ added to current cvs for next version. -- maks
Debian Bug Tracking System
2005-Apr-02 20:18 UTC
Processed: Re: [Logcheck-devel] Bug#302678: Addition ignore line for dnsmasq
Processing commands for control at bugs.debian.org:> tags 302678 pendingBug#302678: Addition ignore line for dnsmasq Tags were: patch Tags added: pending> thanksStopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database)
Debian Bug Tracking System
2005-Apr-03 00:48 UTC
[Logcheck-devel] Bug#302678: marked as done (Addition ignore line for dnsmasq)
Your message dated Sat, 02 Apr 2005 19:32:08 -0500 with message-id <E1DHt28-0001S0-00 at newraff.debian.org> and subject line Bug#302678: fixed in logcheck 1.2.37 has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -------------------------------------- Received: (at submit) by bugs.debian.org; 2 Apr 2005 10:01:26 +0000>From jdthood at aglu.demon.nl Sat Apr 02 02:01:26 2005Return-path: <jdthood at aglu.demon.nl> Received: from gluck.debian.org [192.25.206.10] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1DHfRW-0006Jl-00; Sat, 02 Apr 2005 02:01:26 -0800 Received: from post-23.mail.nl.demon.net [194.159.73.193] by gluck.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1DHfRV-0003PK-00; Sat, 02 Apr 2005 03:01:25 -0700 Received: from aglu.demon.nl ([83.160.174.170]:3666 helo=localhost) by post-23.mail.nl.demon.net with esmtp (Exim 4.43) id 1DHfRU-000L7O-DJ for submit at bugs.debian.org; Sat, 02 Apr 2005 10:01:24 +0000 Received: by localhost (Postfix, from userid 1001) id 07BD711F3FB; Sat, 2 Apr 2005 12:10:21 +0200 (CEST) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Thomas Hood <jdthood at aglu.demon.nl> To: Debian Bug Tracking System <submit at bugs.debian.org> Subject: Addition ignore line for dnsmasq X-Mailer: reportbug 3.8 Date: Sat, 02 Apr 2005 12:10:21 +0200 Message-Id: <20050402101021.07BD711F3FB at localhost> Delivered-To: submit at bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: Package: logcheck-database Version: 1.2.35 Severity: wishlist Tags: patch Here is a patch to make logcheck ignore a routine message that dnsmasq prints when resolvconf is installed. Perhaps the two "reading ... resolv.conf" lines can be collapsed into one but I will let you implement that. :) --- /etc/logcheck/ignore.d.server/dnsmasq_ORIG 2005-01-08 11:00:37.000000000 +0100 +++ /etc/logcheck/ignore.d.server/dnsmasq 2005-04-02 12:05:34.000000000 +0200 @@ -1,5 +1,6 @@ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: read /etc/hosts - [[:digit:]]+ addresses$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: reading /etc/resolv.conf$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: reading /var/run/dnsmasq/resolv.conf$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: using nameserver [.[:digit:]#]+$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: (DHCPDISCOVER|DHCPOFFER|DHCPREQUEST|DHCPACK|DHCPRELEASE|DHCPINFORM|BOOTP)\([[:alnum:]]+\) [ :[:alnum:]._-]+$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: ignoring nameserver 127\.0\.0\.1 - local interface$ -- System Information: Debian Release: 3.1 APT prefers testing APT policy: (500, 'testing'), (50, 'unstable'), (1, 'experimental') Architecture: i386 (i686) Kernel: Linux 2.6.11 Locale: LANG=en_IE at euro, LC_CTYPE=en_IE at euro (charmap=ISO-8859-15) Versions of packages logcheck-database depends on: ii debconf [debconf-2.0] 1.4.32 Debian configuration management sy -- debconf information: * logcheck-database/rules-directories-note: * logcheck-database/standard-rename-note: * logcheck-database/conffile-cleanup: true * logcheck-database/security_level: workstation --------------------------------------- Received: (at 302678-close) by bugs.debian.org; 3 Apr 2005 00:39:19 +0000>From katie at ftp-master.debian.org Sat Apr 02 16:39:19 2005Return-path: <katie at ftp-master.debian.org> Received: from gluck.debian.org [192.25.206.10] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1DHt95-00030U-00; Sat, 02 Apr 2005 16:39:19 -0800 Received: from newraff.debian.org [208.185.25.31] (mail) by gluck.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1DHt94-000514-00; Sat, 02 Apr 2005 17:39:18 -0700 Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian)) id 1DHt28-0001S0-00; Sat, 02 Apr 2005 19:32:08 -0500 From: Todd Troxell <ttroxell at debian.org> To: 302678-close at bugs.debian.org X-Katie: $Revision: 1.55 $ Subject: Bug#302678: fixed in logcheck 1.2.37 Message-Id: <E1DHt28-0001S0-00 at newraff.debian.org> Sender: Archive Administrator <katie at ftp-master.debian.org> Date: Sat, 02 Apr 2005 19:32:08 -0500 Delivered-To: 302678-close at bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: X-CrossAssassin-Score: 2 Source: logcheck Source-Version: 1.2.37 We believe that the bug you reported is fixed in the latest version of logcheck, which is due to be installed in the Debian FTP archive: logcheck-database_1.2.37_all.deb to pool/main/l/logcheck/logcheck-database_1.2.37_all.deb logcheck_1.2.37.dsc to pool/main/l/logcheck/logcheck_1.2.37.dsc logcheck_1.2.37.tar.gz to pool/main/l/logcheck/logcheck_1.2.37.tar.gz logcheck_1.2.37_all.deb to pool/main/l/logcheck/logcheck_1.2.37_all.deb logtail_1.2.37_all.deb to pool/main/l/logcheck/logtail_1.2.37_all.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 302678 at bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Todd Troxell <ttroxell at debian.org> (supplier of updated logcheck package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster at debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Saturday, 2 Apr 2005 17:57:00 -0500 Source: logcheck Binary: logcheck logtail logcheck-database Architecture: source all Version: 1.2.37 Distribution: unstable Urgency: low Maintainer: Debian logcheck Team <logcheck-devel at lists.alioth.debian.org> Changed-By: Todd Troxell <ttroxell at debian.org> Description: logcheck - Mails anomalies in the system logfiles to the administrator logcheck-database - A database of system log rules for the use of log checkers logtail - Print log file lines that have not been read Closes: 298495 302678 302689 302744 Changes: logcheck (1.2.37) unstable; urgency=low . maks: * Fix routine message when resolvconf is installed. thanks for patch to Thomas Hood <jdthood at aglu.demon.nl> (Closes: #302678) * Add postfix rules for local procmail delivery. (Closes: #302744) * Fix logcheck su rule reporting valid `su -' use. * Add nagios rule for UNREACHABLE messages. thanks for patch to Geoff Crompton <geoff.crompton at strategicdata.com.au> (Closes: #298495) todd: * Revert warning on bad regex code (Closes: #302689) Files: e9c78a935df9b4636f90ac8665c672b7 703 admin optional logcheck_1.2.37.dsc f1ae8e497884da1a52797e7785729cbc 92707 admin optional logcheck_1.2.37.tar.gz def864951111cc13ed067c3abfe2b96c 43912 admin optional logcheck_1.2.37_all.deb b1c78bd4f290d8997d7c37628e8f3d40 60432 admin optional logcheck-database_1.2.37_all.deb 7ad622c61e77b262efbb2d12db0831f4 26874 admin optional logtail_1.2.37_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) iD8DBQFCTyQQ4u3oQ3FHP2YRAvY1AKDGbqYSxrpwxtZaNSVdmqkHF2qqBgCgkbis 6xz/33sY3zVwcdoiax48wwk=VsgA -----END PGP SIGNATURE-----
Debian Bug Tracking System
2005-Apr-19 04:33 UTC
[Logcheck-devel] Bug#302678: marked as done (Incorrect pattern for matching /var/run/dnsmasq/resolv.conf)
Your message dated Tue, 19 Apr 2005 00:02:12 -0400 with message-id <E1DNjwC-0002Fw-00 at newraff.debian.org> and subject line Bug#302678: fixed in logcheck 1.2.38 has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -------------------------------------- Received: (at submit) by bugs.debian.org; 2 Apr 2005 10:01:26 +0000>From jdthood at aglu.demon.nl Sat Apr 02 02:01:26 2005Return-path: <jdthood at aglu.demon.nl> Received: from gluck.debian.org [192.25.206.10] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1DHfRW-0006Jl-00; Sat, 02 Apr 2005 02:01:26 -0800 Received: from post-23.mail.nl.demon.net [194.159.73.193] by gluck.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1DHfRV-0003PK-00; Sat, 02 Apr 2005 03:01:25 -0700 Received: from aglu.demon.nl ([83.160.174.170]:3666 helo=localhost) by post-23.mail.nl.demon.net with esmtp (Exim 4.43) id 1DHfRU-000L7O-DJ for submit at bugs.debian.org; Sat, 02 Apr 2005 10:01:24 +0000 Received: by localhost (Postfix, from userid 1001) id 07BD711F3FB; Sat, 2 Apr 2005 12:10:21 +0200 (CEST) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Thomas Hood <jdthood at aglu.demon.nl> To: Debian Bug Tracking System <submit at bugs.debian.org> Subject: Addition ignore line for dnsmasq X-Mailer: reportbug 3.8 Date: Sat, 02 Apr 2005 12:10:21 +0200 Message-Id: <20050402101021.07BD711F3FB at localhost> Delivered-To: submit at bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: Package: logcheck-database Version: 1.2.35 Severity: wishlist Tags: patch Here is a patch to make logcheck ignore a routine message that dnsmasq prints when resolvconf is installed. Perhaps the two "reading ... resolv.conf" lines can be collapsed into one but I will let you implement that. :) --- /etc/logcheck/ignore.d.server/dnsmasq_ORIG 2005-01-08 11:00:37.000000000 +0100 +++ /etc/logcheck/ignore.d.server/dnsmasq 2005-04-02 12:05:34.000000000 +0200 @@ -1,5 +1,6 @@ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: read /etc/hosts - [[:digit:]]+ addresses$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: reading /etc/resolv.conf$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: reading /var/run/dnsmasq/resolv.conf$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: using nameserver [.[:digit:]#]+$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: (DHCPDISCOVER|DHCPOFFER|DHCPREQUEST|DHCPACK|DHCPRELEASE|DHCPINFORM|BOOTP)\([[:alnum:]]+\) [ :[:alnum:]._-]+$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: ignoring nameserver 127\.0\.0\.1 - local interface$ -- System Information: Debian Release: 3.1 APT prefers testing APT policy: (500, 'testing'), (50, 'unstable'), (1, 'experimental') Architecture: i386 (i686) Kernel: Linux 2.6.11 Locale: LANG=en_IE at euro, LC_CTYPE=en_IE at euro (charmap=ISO-8859-15) Versions of packages logcheck-database depends on: ii debconf [debconf-2.0] 1.4.32 Debian configuration management sy -- debconf information: * logcheck-database/rules-directories-note: * logcheck-database/standard-rename-note: * logcheck-database/conffile-cleanup: true * logcheck-database/security_level: workstation --------------------------------------- Received: (at 302678-close) by bugs.debian.org; 19 Apr 2005 04:19:58 +0000>From katie at ftp-master.debian.org Mon Apr 18 21:19:57 2005Return-path: <katie at ftp-master.debian.org> Received: from newraff.debian.org [208.185.25.31] (mail) by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1DNkDN-0005Nf-00; Mon, 18 Apr 2005 21:19:57 -0700 Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian)) id 1DNjwC-0002Fw-00; Tue, 19 Apr 2005 00:02:12 -0400 From: Todd Troxell <ttroxell at debian.org> To: 302678-close at bugs.debian.org X-Katie: $Revision: 1.55 $ Subject: Bug#302678: fixed in logcheck 1.2.38 Message-Id: <E1DNjwC-0002Fw-00 at newraff.debian.org> Sender: Archive Administrator <katie at ftp-master.debian.org> Date: Tue, 19 Apr 2005 00:02:12 -0400 Delivered-To: 302678-close at bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: X-CrossAssassin-Score: 6 Source: logcheck Source-Version: 1.2.38 We believe that the bug you reported is fixed in the latest version of logcheck, which is due to be installed in the Debian FTP archive: logcheck-database_1.2.38_all.deb to pool/main/l/logcheck/logcheck-database_1.2.38_all.deb logcheck_1.2.38.dsc to pool/main/l/logcheck/logcheck_1.2.38.dsc logcheck_1.2.38.tar.gz to pool/main/l/logcheck/logcheck_1.2.38.tar.gz logcheck_1.2.38_all.deb to pool/main/l/logcheck/logcheck_1.2.38_all.deb logtail_1.2.38_all.deb to pool/main/l/logcheck/logtail_1.2.38_all.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 302678 at bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Todd Troxell <ttroxell at debian.org> (supplier of updated logcheck package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster at debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Monday, 18 Apr 2005 23:45:00 -0500 Source: logcheck Binary: logcheck logtail logcheck-database Architecture: source all Version: 1.2.38 Distribution: unstable Urgency: low Maintainer: Debian logcheck Team <logcheck-devel at lists.alioth.debian.org> Changed-By: Todd Troxell <ttroxell at debian.org> Description: logcheck - Mails anomalies in the system logfiles to the administrator logcheck-database - A database of system log rules for the use of log checkers logtail - Print log file lines that have not been read Closes: 30088 295352 297995 302678 303176 304978 Changes: logcheck (1.2.38) unstable; urgency=low . maks: * Generalise postfix rule concerning network_biopair_interop. * Add rule for ntp message about valid/infalid peers. (Closes #303661) * Improve rules .PHONY target + add checkpo rule for the translation check. * Add help target to debian/rules documenting the syntax. jamie: * Add rule in violations.ignore.d/logcheck-postfix for postgrey (Closes: #30088) * Modify bind notify rule for bind 9.3.x (Closes: #303176) * Add various workstation kernel/udev rules for removable devices (Closes: #297995) * Modify rsync rule to match module names with '.', '-' and '_'. Thanks to SATOH Fumiyasu <fumiya at samba.gr.jp> for the patch (Closes: #295352) * Add nagios rule for UNKNOWN state service notification. * Modify postfix anvil rule for 'max connection' statistics messages to match smtps connections too. * Add new rules for policyd, a postfix policy daemon. * Add more postfix rules for certificate verification failure messages. * Add new rules for postfix scache (connection cache server). * Add rule for bind 9.3 'unexpected RCODE' messages. * Modify dnsmasq rule to match '/var/run/dnsmasq/resolv.conf' too. (Closes: #302678) todd: * Change lockfile location from /var/lock/logcheck to /var/lock/logcheck/logcheck (Thanks Rainer Zocholl) to avoid potential DoS condition. (Closes: #304978) * Make lockfile debug messages refer to the correct files. * Add note about dh_installlogcheck permissions. (See #302379) Files: a040986cd3efb1bc4b4b273ed4a0e635 703 admin optional logcheck_1.2.38.dsc d82a1faa4198dfa7900e518f8b3581d3 94121 admin optional logcheck_1.2.38.tar.gz 520c27384c61dc06f55a9698c42b7bbf 44576 admin optional logcheck_1.2.38_all.deb 70e46d26fa902d29668d16f1f7186af4 61472 admin optional logcheck-database_1.2.38_all.deb 6931679c977e9f6025ebbd4e7ccca586 27374 admin optional logtail_1.2.38_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) iD8DBQFCZH8R4u3oQ3FHP2YRAlR7AJ9f78c4NhflMsODo+Ov+/zR5bWNZACeJy+n 3OqLY4B4e4FxveJ3bkIPBUU=riHA -----END PGP SIGNATURE-----