Logcheck devel - Oct 2005 - Bug#336079: PATCH: rules for ntp over IPv6

Package: logcheck-database
Version: 1.2.41
Severity: normal
Tags: patch

Hi!

My logcheck mail have started to show entries like

Oct 26 22:08:22 gw ntpd[15646]: synchronized to 2001:660:5001:100::6, stratum 2

so here's a patch to the ntp rule file to filter IPv6 addresses as well:

--- ntp.orig	2005-10-27 19:37:01.000000000 +0200
+++ ntp	2005-10-27 19:41:27.000000000 +0200
@@ -2,9 +2,11 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: synchronisation lost$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: no servers reachable$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: synchronized to
[0-9.]{7,15}, stratum [0-9]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: synchronized to
[0-9a-fA-F:.]{4,39}, stratum [0-9]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: synchronized to
LOCAL\([0-9]+\), stratum [0-9]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: kernel time sync
(disabled|enabled) [0-9]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: precision = [0-9]+\.[0-9]+
usec$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: peer [.0-9]{7,15} now
(in)?valid$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: peer [0-9a-fA-F:.]{4,39} now
(in)?valid$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: adjusting local clock by
[.0-9]+s$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: adjust time server [.0-9]+
offset$

Thanks

Beat Bolli

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-1-386
Locale: LANG=C, LC_CTYPE=de_CH (charmap=ISO-8859-1)

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0]         1.4.58     Debian configuration management sy

logcheck-database recommends no packages.

-- debconf information:
* logcheck-database/rules-directories-note:
* logcheck-database/standard-rename-note:
* logcheck-database/conffile-cleanup: true

tags 336079 pending
thanks!

On 27 Oct 2005, at 18:51, Beat Bolli wrote:
> My logcheck mail have started to show entries like
>
> Oct 26 22:08:22 gw ntpd[15646]: synchronized to  
> 2001:660:5001:100::6, stratum 2
>
> so here's a patch to the ntp rule file to filter IPv6 addresses as  
> well:
<snip>

I've modified the rules to look like so..

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: synchronized to  
([0-9.]{7,15}|[0-9a-fA-F:.]{4,39}), stratum [0-9]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: peer ([.0-9]{7,15}| 
[0-9a-fA-F:.]{4,39}) now (in)?valid$

They now match the entries you gave.

Thanks for your bug report,

-- 
-Jamie L. Penman-Smithson <jamie at silverdream.org>
  t: +44 1273 424795; f: +44 1273 424795
  PGP: C0A7 955E EED6 A309 23D7 863B C76A 26A3 F0DC FCA8
  never send mail to: oubliette.z at gmail.com


-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part
Url :
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20060212/eddb7700/attachment.pgp

Processing commands for control at bugs.debian.org:
> tags 336079 pending
Bug#336079: PATCH: rules for ntp over IPv6
Tags were: patch
Tags added: pending
> thanks!
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)