Wouter Koolen-Wijkstra
2004-Jun-06 16:54 UTC
[Logcheck-devel] Bug#253022: logcheck-database: Inaccurate fetchmail regexp
Package: logcheck-database Version: 1.2.22 Severity: normal /etc/logcheck/ignore.d.server/fetchmail contains the line: fetchmail\[[0-9]+\]: +[0-9]+ +messages? for When using fetchmail on IMAP servers, the syslog entries look like (stuff between <> has been anonimicised): Jun 6 18:45:54 <host> fetchmail[7617]: 1160 messages (1160 seen) for <user> at <imapserver>. So the regexp doesn't match, because of the seen mail count. A solution would include an optional seen mail count, or skip the for keyword. I cannot oversee the implications for other output of fetchmail, so I don't know which solution is preferred. You girls/guys are doing a great job, Wouter Koolen-Wijkstra -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.6optimized.1.0 Locale: LANG=C, LC_CTYPE=C Versions of packages logcheck-database depends on: ii debconf [debconf-2.0] 1.4.25 Debian configuration management sy -- debconf information: * logcheck-database/rules-directories-note: logcheck-database/standard-rename-note: logcheck-database/conffile-cleanup: false
Wouter Koolen-Wijkstra
2004-Jun-06 18:19 UTC
[Logcheck-devel] Bug#253022: Acknowledgement (logcheck-database: Inaccurate fetchmail regexp)
Debian Bug Tracking System wrote:>Thank you for the problem report you have sent regarding Debian. >This is an automatically generated reply, to let you know your message has >been received. It is being forwarded to the package maintainers and other >interested parties for their attention; they will reply in due course. > >Your message has been sent to the package maintainer(s): > Debian logcheck Team <logcheck-devel at lists.alioth.debian.org> > >If you wish to submit further information on your problem, please send >it to 253022 at bugs.debian.org (and *not* to >submit at bugs.debian.org). > >Please do not reply to the address at the top of this message, >unless you wish to report a problem with the Bug-tracking system. > >Debian bug tracking system administrator >(administrator, Debian Bugs database) > >Dear package maintainer(s) An related point is the use of IMAP flushing (deleting messages after reception), which some people prefer not to do. The regexp in /etc/logcheck/ignore.d.server/fetchmail looks like this: fetchmail\[[0-9]+\]: +flushed And the syslog lines look like: Jun 6 19:10:05 <host> fetchmail[7617]: not flushed The solution would be to change the regexp to: fetchmail\[[0-9]+\]: +not? flushed Cordially, Wouter Koolen-Wijkstra
maks attems
2004-Jun-06 22:47 UTC
Bug#253022: [Logcheck-devel] Bug#253022: logcheck-database: Inaccurate fetchmail regexp
On Sun, 06 Jun 2004, Wouter Koolen-Wijkstra wrote:> Package: logcheck-database > Version: 1.2.22 > Severity: normal > > /etc/logcheck/ignore.d.server/fetchmail contains the line: > > fetchmail\[[0-9]+\]: +[0-9]+ +messages? forcurrent logcheck-database does not include that rule. i'm a bit tired right now, so double-check: $ dpkg -L logcheck-database | grep fetchmail> When using fetchmail on IMAP servers, the syslog entries > look like (stuff between <> has been anonimicised): > > Jun 6 18:45:54 <host> fetchmail[7617]: 1160 messages (1160 seen) for > <user> at <imapserver>.this message seems interesting could you post some real ones that one can grep agains. that may to it: # egrep 'fetchmail\[[0-9]+\]' /var/log/syslog | head -n 25 > syslog_fetchmail i'm eager to add a fine rule, please append aboves file to a follow-up? thanks for your bug report. a++ maks -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20040607/a50e8d17/attachment.pgp
maks attems
2004-Jun-07 16:44 UTC
Bug#253022: [Logcheck-devel] Bug#253022: logcheck-database: Inaccurate fetchmail regexp
tags 253022 -moreinfo thanks> On Sun, 06 Jun 2004, Wouter Koolen-Wijkstra wrote: > > > Package: logcheck-database > > Version: 1.2.22 > > Severity: normal > > > > /etc/logcheck/ignore.d.server/fetchmail contains the line: > > > > fetchmail\[[0-9]+\]: +[0-9]+ +messages? forthe rule is from fetchmail, i will reassign that bug against there package with a nice patch to update there rule set. a++ maks -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20040607/b0046ec1/attachment.pgp
Debian Bug Tracking System
2004-Jun-07 16:48 UTC
Processed: Re: Bug#253022: [Logcheck-devel] Bug#253022: logcheck-database: Inaccurate fetchmail regexp
Processing commands for control at bugs.debian.org:> tags 253022 -moreinfoBug#253022: logcheck-database: Inaccurate fetchmail regexp Tags were: moreinfo Tags removed: moreinfo> thanksStopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database)
Gerfried Fuchs
2004-Jun-07 18:09 UTC
Bug#253022: [Logcheck-devel] Bug#253022: logcheck-database: Inaccurate fetchmail regexp
reassign 253022 fetchmail-common thanks * Wouter Koolen-Wijkstra <wmkoolen at science.uva.nl> [2004-06-06 18:54]:> /etc/logcheck/ignore.d.server/fetchmail contains the line:Great explenation, but wrong package. :) That file is part of fetchmail-common and I hope the maintainer will include the proposed fix. We do encourage package maintainers to include the rules file for their packages themself because they know best what messages their software might send.> fetchmail\[[0-9]+\]: +[0-9]+ +messages? for > > When using fetchmail on IMAP servers, the syslog entries > look like (stuff between <> has been anonimicised): > > Jun 6 18:45:54 <host> fetchmail[7617]: 1160 messages (1160 seen) for > <user> at <imapserver>. > > So the regexp doesn't match, because of the seen mail count. A solution > would include an optional seen mail count, or skip the for keyword. I > cannot oversee the implications for other output of fetchmail, so I don't > know which solution is preferred.I personally would suggest to make that bracket part optional and not skip the "for" part. It is always good to be quite thighten with security related things (well, sort of security). fetchmail\[[0-9]+\]: +[0-9]+ +messages? (\([0-9]+ seen\))?for I like to question the " +" parts -- does it really happen that there are more spaces in between there than just one?> You girls/guys are doing a great job,Thanks, and you are currently contributing to it so you can count yourself in. So long, Alfie --> Wozu ein Forum, wenn's Usenet gibt?Fuer jedes neue Forum eine neue Oberflaeche zu lernen, bringt mehr Abwechslung ins Leben -- Alexander Talos in <3d18e47b$0$20382$3b214f66 at news.univie.ac.at> -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20040607/c5c5b937/attachment.pgp
Debian Bug Tracking System
2004-Jun-07 18:18 UTC
Processed: Re: [Logcheck-devel] Bug#253022: logcheck-database: Inaccurate fetchmail regexp
Processing commands for control at bugs.debian.org:> reassign 253022 fetchmail-commonBug#253022: logcheck-database: Inaccurate fetchmail regexp Bug reassigned from package `logcheck-database' to `fetchmail-common'.> thanksStopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database)