Marco Nenciarini
2004-Jun-27 19:11 UTC
[Logcheck-devel] Bug#256549: ruleset for dhcp does not match dhcp3-server output
Package: logcheck
Version: 1.2.22a
Severity: normal
I have just installed dhcp3-server, and my logcheck has begun to report
all normal operation messages from dhcp3-server.
This is because dhcp3-server adds the hostname after MAC address in all
reports.
I have attached a patch ro "silent" logcheck with dhcp3-server.
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.6-2-686
Locale: LANG=it_IT at euro, LC_CTYPE=it_IT at euro
Versions of packages logcheck depends on:
ii adduser 3.57 Add and remove users and groups
ii cron 3.0pl1-83 management of regular background p
ii debconf [debconf 1.4.29 Debian configuration management sy
ii debianutils 2.8.3 Miscellaneous utilities specific t
ii lockfile-progs 0.1.10 Programs for locking and unlocking
ii logcheck-databas 1.2.22a A database of system log rules for
ii logtail 1.2.22a Print log file lines that have not
ii mailx 1:8.1.2-0.20040524cvs-1 A simple mail user agent
ii perl 5.8.4-2 Larry Wall's Practical
Extraction
ii postfix [mail-tr 2.1.3-1 A high-performance mail transport
ii sysklogd [system 1.4.1-14 System Logging Daemon
-- debconf information:
logcheck/changes:
* logcheck/install-note:
-------------- next part --------------
--- dhcp.dpkg-dist 2004-06-27 20:16:56.000000000 +0200
+++ dhcp 2004-06-27 20:27:37.000000000 +0200
@@ -6,11 +6,13 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): Wrote [0-9]+ new dynamic
host decls to leases file\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): Wrote [0-9]+ leases to
leases file\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|):$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPDISCOVER from
[:[:alnum:]]+ via [[:alnum:]]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPOFFER on [.0-9]+ to
[:[:alnum:]]+ via [[:alnum:]]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPREQUEST for [.0-9]+
(\([.0-9]+\) |)from [:[:alnum:]]+ via [[:alnum:]]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPACK on [.0-9]+ to
[:[:alnum:]]+ via [[:alnum:]]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPDISCOVER from
[:[:alnum:]]+ (\([[:alnum:]]+\) |)via [[:alnum:]]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPOFFER on [.0-9]+ to
[:[:alnum:]]+ (\([[:alnum:]]+\) |)via [[:alnum:]]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPREQUEST for [.0-9]+
(\([.0-9]+\) |)from [:[:alnum:]]+ (\([[:alnum:]]+\) |)via [[:alnum:]]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPACK on [.0-9]+ to
[:[:alnum:]]+ (\([[:alnum:]]+\) |)via [[:alnum:]]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): BOOTREQUEST from
[:[:alnum:]]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPINFORM from
[:[:alnum:]]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPINFORM from [.0-9]+ via
[[:alnum:]]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPNAK on [:[:alnum:]]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPRELEASE on [.0-9]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPACK to [.0-9]+$
Todd Troxell
2004-Jul-01 06:29 UTC
Bug#256549: [Logcheck-devel] Bug#256549: ruleset for dhcp does not match dhcp3-server output
tag 256549 pending thanks Thanks, Marco. Patched in cvs. Release est ~1 week. On Sun, Jun 27, 2004 at 09:11:34PM +0200, Marco Nenciarini wrote:> Package: logcheck > Version: 1.2.22a > Severity: normal > > I have just installed dhcp3-server, and my logcheck has begun to report > all normal operation messages from dhcp3-server. > > This is because dhcp3-server adds the hostname after MAC address in all > reports. > > I have attached a patch ro "silent" logcheck with dhcp3-server.-- [ Todd J. Troxell ,''`. Student, Debian GNU/Linux Developer, SysAdmin, Geek : :' : http://debian.org || http://rapidpacket.com/~xtat `. `' `- ] -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20040701/1a0a1f00/attachment.pgp
Debian Bug Tracking System
2004-Jul-01 06:33 UTC
Processed: Re: [Logcheck-devel] Bug#256549: ruleset for dhcp does not match dhcp3-server output
Processing commands for control at bugs.debian.org:> tag 256549 pendingBug#256549: ruleset for dhcp does not match dhcp3-server output There were no tags set. Tags added: pending> thanksStopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database)
Debian Bug Tracking System
2004-Jul-09 03:48 UTC
[Logcheck-devel] Bug#256549: marked as done (ruleset for dhcp does not match dhcp3-server output)
Your message dated Thu, 08 Jul 2004 23:32:06 -0400 with message-id <E1Bim7K-0004VR-00 at newraff.debian.org> and subject line Bug#256549: fixed in logcheck 1.2.23 has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -------------------------------------- Received: (at submit) by bugs.debian.org; 27 Jun 2004 19:12:07 +0000>From mnencia at poison.ath.cx Sun Jun 27 12:12:07 2004Return-path: <mnencia at poison.ath.cx> Received: from smtp.virgilio.it (vsmtp2.tin.it) [212.216.176.142] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1Bef4R-0000wR-00; Sun, 27 Jun 2004 12:12:07 -0700 Received: from poison.ath.cx (82.49.65.30) by vsmtp2.tin.it (7.0.027) id 40DB55EE0008B1B7 for submit at bugs.debian.org; Sun, 27 Jun 2004 21:11:36 +0200 Received: by poison.ath.cx (Postfix, from userid 1000) id E26662FD; Sun, 27 Jun 2004 21:11:34 +0200 (CEST) Content-Type: multipart/mixed; boundary="===============1922910292==" MIME-Version: 1.0 From: Marco Nenciarini <mnencia at poison.ath.cx> To: Debian Bug Tracking System <submit at bugs.debian.org> Subject: ruleset for dhcp does not match dhcp3-server output X-Mailer: reportbug 2.62 Date: Sun, 27 Jun 2004 21:11:34 +0200 Message-Id: <20040627191134.E26662FD at poison.ath.cx> Delivered-To: submit at bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2004_03_25 X-Spam-Level: This is a multi-part MIME message sent by reportbug. --===============1922910292=Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline Package: logcheck Version: 1.2.22a Severity: normal I have just installed dhcp3-server, and my logcheck has begun to report all normal operation messages from dhcp3-server. This is because dhcp3-server adds the hostname after MAC address in all reports. I have attached a patch ro "silent" logcheck with dhcp3-server. -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.6-2-686 Locale: LANG=it_IT at euro, LC_CTYPE=it_IT at euro Versions of packages logcheck depends on: ii adduser 3.57 Add and remove users and groups ii cron 3.0pl1-83 management of regular background p ii debconf [debconf 1.4.29 Debian configuration management sy ii debianutils 2.8.3 Miscellaneous utilities specific t ii lockfile-progs 0.1.10 Programs for locking and unlocking ii logcheck-databas 1.2.22a A database of system log rules for ii logtail 1.2.22a Print log file lines that have not ii mailx 1:8.1.2-0.20040524cvs-1 A simple mail user agent ii perl 5.8.4-2 Larry Wall's Practical Extraction ii postfix [mail-tr 2.1.3-1 A high-performance mail transport ii sysklogd [system 1.4.1-14 System Logging Daemon -- debconf information: logcheck/changes: * logcheck/install-note: --===============1922910292=Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="logcheck.dhcpd3.patch" --- dhcp.dpkg-dist 2004-06-27 20:16:56.000000000 +0200 +++ dhcp 2004-06-27 20:27:37.000000000 +0200 @@ -6,11 +6,13 @@ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): Wrote [0-9]+ new dynamic host decls to leases file\.$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): Wrote [0-9]+ leases to leases file\.$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|):$ -^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPDISCOVER from [:[:alnum:]]+ via [[:alnum:]]+$ -^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPOFFER on [.0-9]+ to [:[:alnum:]]+ via [[:alnum:]]+$ -^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPREQUEST for [.0-9]+ (\([.0-9]+\) |)from [:[:alnum:]]+ via [[:alnum:]]+$ -^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPACK on [.0-9]+ to [:[:alnum:]]+ via [[:alnum:]]+$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPDISCOVER from [:[:alnum:]]+ (\([[:alnum:]]+\) |)via [[:alnum:]]+$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPOFFER on [.0-9]+ to [:[:alnum:]]+ (\([[:alnum:]]+\) |)via [[:alnum:]]+$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPREQUEST for [.0-9]+ (\([.0-9]+\) |)from [:[:alnum:]]+ (\([[:alnum:]]+\) |)via [[:alnum:]]+$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPACK on [.0-9]+ to [:[:alnum:]]+ (\([[:alnum:]]+\) |)via [[:alnum:]]+$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): BOOTREQUEST from [:[:alnum:]]+$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPINFORM from [:[:alnum:]]+$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPINFORM from [.0-9]+ via [[:alnum:]]+$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPNAK on [:[:alnum:]]+$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPRELEASE on [.0-9]+$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPACK to [.0-9]+$ --===============1922910292==-- --------------------------------------- Received: (at 256549-close) by bugs.debian.org; 9 Jul 2004 03:38:02 +0000>From katie at ftp-master.debian.org Thu Jul 08 20:38:02 2004Return-path: <katie at ftp-master.debian.org> Received: from newraff.debian.org [208.185.25.31] (mail) by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1BimD4-0006JX-00; Thu, 08 Jul 2004 20:38:02 -0700 Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian)) id 1Bim7K-0004VR-00; Thu, 08 Jul 2004 23:32:06 -0400 From: Todd Troxell <ttroxell at debian.org> To: 256549-close at bugs.debian.org X-Katie: $Revision: 1.51 $ Subject: Bug#256549: fixed in logcheck 1.2.23 Message-Id: <E1Bim7K-0004VR-00 at newraff.debian.org> Sender: Archive Administrator <katie at ftp-master.debian.org> Date: Thu, 08 Jul 2004 23:32:06 -0400 Delivered-To: 256549-close at bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2004_03_25 X-Spam-Level: X-CrossAssassin-Score: 12 Source: logcheck Source-Version: 1.2.23 We believe that the bug you reported is fixed in the latest version of logcheck, which is due to be installed in the Debian FTP archive: logcheck-database_1.2.23_all.deb to pool/main/l/logcheck/logcheck-database_1.2.23_all.deb logcheck_1.2.23.dsc to pool/main/l/logcheck/logcheck_1.2.23.dsc logcheck_1.2.23.tar.gz to pool/main/l/logcheck/logcheck_1.2.23.tar.gz logcheck_1.2.23_all.deb to pool/main/l/logcheck/logcheck_1.2.23_all.deb logtail_1.2.23_all.deb to pool/main/l/logcheck/logtail_1.2.23_all.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 256549 at bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Todd Troxell <ttroxell at debian.org> (supplier of updated logcheck package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster at debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Thursday, 12 Jul 2004 22:55:19 -0500 Source: logcheck Binary: logcheck logtail logcheck-database Architecture: source all Version: 1.2.23 Distribution: unstable Urgency: low Maintainer: Debian logcheck Team <logcheck-devel at lists.alioth.debian.org> Changed-By: Todd Troxell <ttroxell at debian.org> Description: logcheck - Mails anomalies in the system logfiles to the administrator logcheck-database - A database of system log rules for the use of log checkers logtail - Print log file lines that have not been read Closes: 149567 186372 190101 234385 244171 253861 253879 253998 254133 254681 255560 256549 Changes: logcheck (1.2.23) unstable; urgency=low . maks: * Remove logcheck pre-dependency on logtail. * Added imapproxy, kernel, nfs, scponly rules. * Updated dhcpd, innd, postfix, su, sudo rules. (Closes: #253879, #244171, #190101, #254681, #253861, #186372, #255560). * Fix locale dependent regexes. * Implemented testing mode to logcheck - doesn't update offset. * Added -l LOG switch for test runs on new log files. thanks todd for ideas and first work (Closes: #234385). * Add -m switch to specify recipient. (Closes: #149567). alfie: * debian/logcheck-database.templates: Clearified the rules-directories-note template and got updates for all translations. Thanks for fast responses! todd: * Update innfeed rules (Closes: #254133). * Update dhcp3 rules (Closes: #256549). * Change postinst script to set permissions on versions previous to 1.2.23 (Closes: #253998). * Add postfix rule for lmtp. * Add Rule for cyrus imap/SQUAT annoyance. * Spamd update for unknown message id. * Add Kernel and bonobo rules for workstations. Files: 194681a5833e247adcd50c6ffe0e4a43 670 admin optional logcheck_1.2.23.dsc ec715b8a1160751367dabdecb4ddfeb4 74885 admin optional logcheck_1.2.23.tar.gz 14ba0cd447909d769867efbd331960e6 37348 admin optional logcheck_1.2.23_all.deb bad26ea13036470994f54bf9e1c3c18b 42778 admin optional logcheck-database_1.2.23_all.deb ba84ae48e13e927d3e4da649913768e6 21788 admin optional logtail_1.2.23_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFA7gsO4u3oQ3FHP2YRApstAKCSu6oScQckvbfjz0y3DuA51fD8dwCgw0Dc Np43xnp5o9CWVR4xuRbUqx4=MYFx -----END PGP SIGNATURE-----