Logcheck devel - Dec 2013 - Bug#732298: logcheck-database: dhclient diag message changed; updated rule to ignore it

Package: logcheck-database
Version: 1.3.15
Severity: normal
Tags: patch

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[Apologies if this is a dup; I submitted yesterday but got no conf.
and don't see it at the online tracker.]

Configured in server mode, logcheck does not ignore messages such
as these -
    Dec 15 06:40:14 bb dhclient: parse_option_buffer: malformed option
dhcp.smtp-server (code 69): option length exceeds option buffer length.
    Dec 15 10:35:39 bb dhclient: parse_option_buffer: malformed option
dhcp.<unknown> (code 111): option length exceeds option buffer length.

There is a rule in ignore.server.d/dhclient which apparently is
intended to catch similar messages. My guess is that dhclient has
updated its text and logcheck didn't follow. The result can be
notifications when nothing truly relevant has happened.

This patch ignores the new error text as well as leaving the old match.


*** dhclient.diff
*** /etc/logcheck/ignore.d.server/dhclient.orig	Sun Dec 15 13:53:55 2013
- --- /etc/logcheck/ignore.d.server/dhclient	Sun Dec 15 08:13:41 2013
***************
*** 24,26 ****
- --- 24,27 ----
  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Sleeping\.$
  # 3.0
  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient: parse_option_buffer: option
[-[:alnum:]]+ \([[:digit:]]+\) larger than buffer\.$
+ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient: parse_option_buffer: malformed
option dhcp\.[-[:alnum:]<>]+ \(code [[:digit:]]+\): option length exceeds
option buffer length\.$


- -- System Information:
Debian Release: 7.2
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash

- -- Configuration Files:
/etc/logcheck/ignore.d.server/dhclient changed [not included]

- -- no debconf information

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlKu+48ACgkQnN+41NpzKveJPACggiY0mpyfZmVYcF22cNiBnBl9
CH4AnRaqw78hQMuY7lD73vwKtb4bjHWg
=pEX4
-----END PGP SIGNATURE-----

Control: reassign -1 src:isc-dhcp-client
Control: retitle -1 incorporate logcheck snippets
Control: user debian-release at lists.debian.org
Control: usertag -1 bsp-2014-01-gb-Monmouth

Dear maintainer,

Logcheck is a package to filter system log events for the administrator.
Its aim is to remove chatter from the log files, leaving only the events
that the administrator needs to deal with. Filtering is for display only,
leaving the original log file intact for later reading.

Please ship snippets for consumption by the logcheck package. Logcheck
will stop shipping snippets for isc-dhcp-client in the future, so it's
important
that isc-dhcp-client takes over these files.

If you use debhelper or CDBS, this is very simple:

1. provide your snippets in debian/<package>.logcheck.<type>
   where <type> is one of the following:
      violations
      violations.ignore
      ignore.workstation
      ignore.server
      ignore.paranoid
2. add a call to dh_installlogcheck in debian/rules, if you use debhelper
   without the automatic sequencer
3. add a versioned Breaks: logcheck-database (<= 1.3.16~) to your control
   file

Please allow 7 days before uploading a package including these changes;
this is to give time for a superceding logcheck package to be prepared.
For your convenience, the current snippets (if any) are attached.

For further information, please see README.Maintainers in the logcheck
package.

-------------- next part --------------
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Internet
(Software|Systems) Consortium DHCP Client [.[:alnum:]-]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Copyright [-0-9]+ Internet
Systems Consortium\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: All rights reserved\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: For info, please visit
http(://www\.isc\.org/(products/DHCP|sw/dhcp/)|s://www\.isc\.org/software/dhcp/)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: There is already a pid
file /var/run/dhclient\.[[:alnum:]]+\.pid with pid [[:digit:]]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: killed old client process,
removed PID file$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?:$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Listening on
[^[:space:].]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Sending
on[[:space:]]+[^[:space:]]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: DHCPDISCOVER on
[[:alnum:].-]+ to [.0-9]{7,15} port 67 interval [0-9]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: DHCP(NAK|ACK|OFFER) (of
[.0-9]{7,15} )?from [.0-9]{7,15}$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: DHCP(REQUEST|RELEASE) (of
[.0-9]{7,15} )?on [[:alnum:].-]+ to [.0-9]{7,15} port 67$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: bound(:| to [.0-9]{7,15}
--) renewal in [0-9]+ seconds\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: [[:lower:]]+[0-9]: unknown
hardware address type [0-9]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Trying recorded lease
[.0-9]{7,15}$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: No working leases in
persistent database( - sleeping)?\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: send_packet: Network is
unreachable$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: send_packet: please
consult README file regarding broadcast address\.$
# dhcp-client 2.0
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Copyright (199[5-9],?
){5}(The )?Internet Software Consortium\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Please contribute if you
find this software useful\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: For info, please visit
http://www.isc.org/dhcp-contrib.html$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: No DHCPOFFERS received\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Sleeping\.$
# 3.0
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient: parse_option_buffer: option
[-[:alnum:]]+ \([[:digit:]]+\) larger than buffer\.$

Processing control commands:
> reassign -1 src:isc-dhcp-client
Bug #732298 [logcheck-database] logcheck-database: dhclient diag message
changed; updated rule to ignore it
Bug reassigned from package 'logcheck-database' to
'src:isc-dhcp-client'.
Warning: Unknown package 'src:isc-dhcp-client'
Warning: Unknown package 'src:isc-dhcp-client'
No longer marked as found in versions logcheck/1.3.15.
Warning: Unknown package 'src:isc-dhcp-client'
Warning: Unknown package 'src:isc-dhcp-client'
Ignoring request to alter fixed versions of bug #732298 to the same values
previously set
Warning: Unknown package 'src:isc-dhcp-client'
> retitle -1 incorporate logcheck snippets
Bug #732298 [src:isc-dhcp-client] logcheck-database: dhclient diag message
changed; updated rule to ignore it
Warning: Unknown package 'src:isc-dhcp-client'
Changed Bug title to 'incorporate logcheck snippets' from
'logcheck-database: dhclient diag message changed; updated rule to ignore
it'
Warning: Unknown package 'src:isc-dhcp-client'
> user debian-release at lists.debian.org
Unknown command or malformed arguments to command.
> usertag -1 bsp-2014-01-gb-Monmouth
Unknown command or malformed arguments to command.


-- 
732298: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732298
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems