Nemo
2010-Aug-09 15:11 UTC
[Logcheck-devel] Bug#592365: logcheck: ignore rules for transmission-daemon
Package: logcheck
Version: 1.3.10
Severity: wishlist
Tags: patch
Hi, I've noticed that transmission-daemon (torrent downloader) is rather
verbose.
Example 1: this line appears approx every 2 minutes whilst the torrent
downloads (differing only by timestamp):
--
Aug 4 14:39:28 falcon transmission-daemon[2685]: Saved
"/var/lib/transmission-daemon/info/resume/debian-505-amd64-businesscard.iso.a437cd5c17cc853d.resume"
(bencode.c:1651)
--
And this appears every 2 minutes regardless.
--
Aug 4 14:39:28 falcon transmission-daemon[2685]: Saved
"/var/lib/transmission-daemon/info/stats.json" (bencode.c:1651)
--
similarly, there the following pairs appear regularly from the time the
torrent begins downloading, and continues all the time it is seeding.
These logs are in pairs, and for my observation, 4 lines per hour is
pretty constant.
--
Aug 5 00:19:56 falcon transmission-daemon[2685]:
debian-505-amd64-businesscard.iso Starting DHT announce (firewalled, 170 nodes)
(tr-dht.c:669)
Aug 5 00:23:13 falcon transmission-daemon[2685]:
debian-505-amd64-businesscard.iso DHT announce done (tr-dht.c:637)
Aug 5 00:46:27 falcon transmission-daemon[2685]:
debian-505-amd64-businesscard.iso Starting DHT announce (firewalled, 171 nodes)
(tr-dht.c:669)
Aug 5 00:50:45 falcon transmission-daemon[2685]:
debian-505-amd64-businesscard.iso DHT announce done (tr-dht.c:637)
--
The following is my ignore.d.server/transmission-daemon file.
Two lines - the first filters the first two examples, the second filters
the second pair.
--
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ transmission-daemon\[[[:digit:]]+\]:
Saved "/var/lib/transmission-daemon/info/.*" \(bencode.c:1651\)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ transmission-daemon\[[0-9]+\]: .* DHT
announce .*\(tr-dht.c:(669|637)\)$
--
The effectiveness of these rules can be seen from:
falcon:/etc/logcheck/ignore.d.server# grep transmission-daemon /var/log/syslog.0
| wc -l
2446
falcon:/etc/logcheck/ignore.d.server# grep transmission-daemon /var/log/syslog.0
| egrep -v -f transmission-daemon | wc -l
131
cheers
.../Nemo
-- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages logcheck depends on:
ii adduser 3.112 add and remove users and groups
ii cron 3.0pl1-113 process scheduling daemon
ii lockfile-progs 0.1.15 Programs for locking and unlocking
ii logtail 1.3.10 Print log file lines that have not
ii mime-construct 1.11 construct/send MIME messages from
ii postfix [mail-transport-agent 2.7.1-1 High-performance mail transport ag
ii sysklogd [system-log-daemon] 1.5-5 System Logging Daemon
Versions of packages logcheck recommends:
ii logcheck-database 1.3.10 database of system log rules for t
Versions of packages logcheck suggests:
ii syslog-summary 1.14-1 summarize the contents of a syslog
-- Configuration Files:
/etc/cron.d/logcheck changed [not included]
/etc/logcheck/logcheck.conf [Errno 13] Permission denied:
u'/etc/logcheck/logcheck.conf'
/etc/logcheck/logcheck.logfiles [Errno 13] Permission denied:
u'/etc/logcheck/logcheck.logfiles'
-- no debconf information
Nemo
2010-Aug-10 00:28 UTC
[Logcheck-devel] Bug#592365: logcheck: ignore rules for transmission-daemon
Just realised I'd only tweaked :digit: style into one line. Revised
version included:
--
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ transmission-daemon\[[[:digit:]]+\]:
Saved "/var/lib/transmission-daemon/info/.*" \(bencode.c:1651\)$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ transmission-daemon\[[[:digit:]]+\]: .*
DHT announce .*\(tr-dht.c:(669|637)\)$
--
Changes tested against my logs to same results as previous
.../Nemo
On Tue, Aug 10, 2010 at 01:11:54AM +1000, Nemo did
utter:>
> --
> ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+
transmission-daemon\[[[:digit:]]+\]: Saved
"/var/lib/transmission-daemon/info/.*" \(bencode.c:1651\)$
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ transmission-daemon\[[0-9]+\]: .* DHT
announce .*\(tr-dht.c:(669|637)\)$
> --
>