Logcheck devel - Oct 2004 - Bug#277636: logcheck-database: support for dnsmasq

Package: logcheck-database
Version: 1.2.28
Severity: wishlist


Could you add support for dnsmasq for the server profile?
This is the standard dnsmasq output.

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: read /etc/hosts -
[[:digit:]]+ addresses$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: reading
/etc/resolv.conf$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: using nameserver .*$



-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.8.1
Locale: LANG=nl_NL.ISO-8859-1, LC_CTYPE=nl_NL.ISO-8859-1

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0]         1.4.30.8   Debian configuration management sy

-- debconf information:
* logcheck-database/rules-directories-note:
  logcheck-database/standard-rename-note:
  logcheck-database/conffile-cleanup: false

Hi there,
> Could you add support for dnsmasq for the server profile?
> This is the standard dnsmasq output.
>
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: read
> /etc/hosts - [[:digit:]]+ addresses$
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: reading
> /etc/resolv.conf$
I'll add these rules to CVS, thanks.
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: using
> nameserver .*$
This rule is a little too broad, could you post some log messages so we
can tailor this a bit more?

Thanks,

-j

Jamie L. Penman-Smithson wrote:
>
>
>  
>
>>^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: using
>>nameserver .*$
>>    
>>
>
>This rule is a little too broad, could you post some log messages so we
>can tailor this a bit more?
>
>
>  
>
it is of this form:

Oct 21 09:24:58 phoenix dnsmasq[468]: using nameserver 212.29.160.1#53

so maybe the expression should read:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: using nameserver
[#\.0-9]$




-- 
Wouter de Vries <w.l.devries at student.tudelft.nl>

Your message dated Tue, 02 Nov 2004 00:47:03 -0500
with message-id <E1COrVX-0000Ay-00 at newraff.debian.org>
and subject line Bug#277636: fixed in logcheck 1.2.30
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 21 Oct 2004 12:02:01
+0000
>From sax at lockstockandbarrel.nl Thu Oct 21 05:02:01 2004
Return-path: <sax at lockstockandbarrel.nl>
Received: from 40-92.ipact.nl (phoenix) [82.210.92.40] 
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1CKbdp-0001Pc-00; Thu, 21 Oct 2004 05:02:01 -0700
Received: from sax by phoenix with local (Exim 4.34)
	id 1CKbdo-0007L7-5f; Thu, 21 Oct 2004 14:02:00 +0200
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Wouter de Vries <w.l.devries at student.tudelft.nl>
To: Debian Bug Tracking System <submit at bugs.debian.org>
Subject: logcheck-database: support for dnsmasq
X-Mailer: reportbug 2.63
Date: Thu, 21 Oct 2004 14:02:00 +0200
Message-Id: <E1CKbdo-0007L7-5f at phoenix>
Sender: Wouter de Vries <sax at lockstockandbarrel.nl>
Delivered-To: submit at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
	autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 

Package: logcheck-database
Version: 1.2.28
Severity: wishlist


Could you add support for dnsmasq for the server profile?
This is the standard dnsmasq output.

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: read /etc/hosts -
[[:digit:]]+ addresses$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: reading
/etc/resolv.conf$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: using nameserver .*$



-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.8.1
Locale: LANG=nl_NL.ISO-8859-1, LC_CTYPE=nl_NL.ISO-8859-1

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0]         1.4.30.8   Debian configuration management sy

-- debconf information:
* logcheck-database/rules-directories-note:
  logcheck-database/standard-rename-note:
  logcheck-database/conffile-cleanup: false

---------------------------------------
Received: (at 277636-close) by bugs.debian.org; 2 Nov 2004 05:54:10
+0000
>From katie at ftp-master.debian.org Mon Nov 01 21:54:10 2004
Return-path: <katie at ftp-master.debian.org>
Received: from newraff.debian.org [208.185.25.31] (mail)
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1COrcQ-0008LK-00; Mon, 01 Nov 2004 21:54:10 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
	id 1COrVX-0000Ay-00; Tue, 02 Nov 2004 00:47:03 -0500
From: Todd Troxell <ttroxell at debian.org>
To: 277636-close at bugs.debian.org
X-Katie: $Revision: 1.51 $
Subject: Bug#277636: fixed in logcheck 1.2.30
Message-Id: <E1COrVX-0000Ay-00 at newraff.debian.org>
Sender: Archive Administrator <katie at ftp-master.debian.org>
Date: Tue, 02 Nov 2004 00:47:03 -0500
Delivered-To: 277636-close at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 
X-CrossAssassin-Score: 2

Source: logcheck
Source-Version: 1.2.30

We believe that the bug you reported is fixed in the latest version of
logcheck, which is due to be installed in the Debian FTP archive:

logcheck-database_1.2.30_all.deb
  to pool/main/l/logcheck/logcheck-database_1.2.30_all.deb
logcheck_1.2.30.dsc
  to pool/main/l/logcheck/logcheck_1.2.30.dsc
logcheck_1.2.30.tar.gz
  to pool/main/l/logcheck/logcheck_1.2.30.tar.gz
logcheck_1.2.30_all.deb
  to pool/main/l/logcheck/logcheck_1.2.30_all.deb
logtail_1.2.30_all.deb
  to pool/main/l/logcheck/logtail_1.2.30_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 277636 at bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Todd Troxell <ttroxell at debian.org> (supplier of updated logcheck
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster at debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Tuesday, 02 Nov 2004 00:21:41 -0500
Source: logcheck
Binary: logcheck logtail logcheck-database
Architecture: source all
Version: 1.2.30
Distribution: unstable
Urgency: low
Maintainer: Debian logcheck Team <logcheck-devel at
lists.alioth.debian.org>
Changed-By: Todd Troxell <ttroxell at debian.org>
Description: 
 logcheck   - Mails anomalies in the system logfiles to the administrator
 logcheck-database - A database of system log rules for the use of log checkers
 logtail    - Print log file lines that have not been read
Closes: 277635 277636 277782 278337
Changes: 
 logcheck (1.2.30) unstable; urgency=low
 .
   maks:
   * Move pptpd rules to level server.
   * Small typo fixes in docs.
   * New rules for bind, courier, cpqarrayd, dhcp, jabberd, nagios, ntp,
     openvpn, postfix, slapd, smartd, smokeping, squid, ssh, thy, uptimed.
     all for level server thanks to Peter Palfrader <weasel at
debian.org>.
   * Logcheck/rules: Don't take locale for granted use character class
instead.
   * Fix 2 samba rules at level server. (closes: #277635)
   * Added rules for perdition, postfix, pure-ftpd, snmpd.
     thanks to Brendon Baumgartner <brendon at brendon.com>
   * Small enhancment courier rule.
   * Simplify logic in logcheck-postinst.
   jamie:
   * Add rules for dnsmasq. (closes: #277636)
   * Add rules for hylafax.
   * Add violations.ignore.d rules for hylafax.
   alfie:
   * Fix sed error to really remove trailing spaces. (closes: #278337)
   * Add myself to uploaders field because of stable releases.
   todd:
   * Remove chown from debian/rules.  (closes: #277782)
Files: 
 f7ecf621697688c1ca6705e234fb9908 703 admin optional logcheck_1.2.30.dsc
 997fc66d90b62581b6f499a215172ac2 86232 admin optional logcheck_1.2.30.tar.gz
 fa9e5de917aa1215fa95cb0b7f361415 40484 admin optional logcheck_1.2.30_all.deb
 a8d58ffc3656c38bfb67f0a3a26fd9cd 53674 admin optional
logcheck-database_1.2.30_all.deb
 4b866f21f9fc1bf2e0ea9c040dde653b 24058 admin optional logtail_1.2.30_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBhxoR4u3oQ3FHP2YRAveWAJ0QBA3LVgMcXyoQhTV0IYgklDKYeACfdXIv
d9iNSWwqszWiYsWf9x4hohU=lbKP
-----END PGP SIGNATURE-----