Logcheck devel - Jul 2005 - Bug#317741: logcheck-database: fails to ignore properly some lines from 'rbldnsd'

Package: logcheck-database
Version: 1.2.40
Severity: normal
Tags: patch

There are one line that is not properly ignored. I include in the report
a better version.

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (400, 'testing'), (300, 'unstable'), (200,
'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-k7
Locale: LANG=es_ES.UTF-8, LC_CTYPE=es_ES.UTF-8 (charmap=UTF-8)

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0]         1.4.30.13  Debian configuration management sy

-- debconf information:
  logcheck-database/conffile-cleanup: false
  logcheck-database/rules-directories-note:
  logcheck-database/standard-rename-note:
-------------- next part --------------
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rbldnsd\[[0-9]+\]: listening on
[0-9.]{7,15}/[0-9]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rbldnsd\[[0-9]+\]: ip4set:[._[:alnum:]-]+:
[0-9]{8} [0-9]+: [[:alnum:]/=]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rbldnsd\[[0-9]+\]: zones reloaded, time
[\./[:alnum:]]+ sec, mem arena=[0-9]+ free=[0-9]+ mmap=[0-9]+ \w{1,2}$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rbldnsd\[[0-9]+\]: stats for [0-9]+secs zone
[._[:alnum:]-]+: tot=[0-9]+ ok=[0-9]+ nxd=[0-9]+ err=[0-9]+ in=[0-9]+
out=[0-9]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rbldnsd\[[0-9]+\]: stats for [0-9]+sec:
tot=[0-9]+ ok=[0-9]+ nxd=[0-9]+ err=[0-9]+ in=[0-9]+ out=[0-9]+$

tags 317741 moreinfo
thanks

On Mon, 11 Jul 2005, Administrador de Sistemas wrote:
> There are one line that is not properly ignored. I include in the report
> a better version.
please provide a sample message against belows rule can be matched?

 
--
maks

Processing commands for control at bugs.debian.org:
> tags 317741 moreinfo
Bug#317741: logcheck-database: fails to ignore properly some lines from
'rbldnsd'
Tags were: patch
Tags added: moreinfo
> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)

Your message dated Mon, 22 Aug 2005 13:32:39 -0700
with message-id <E1E7IyF-0002y7-00 at spohr.debian.org>
and subject line Bug#317741: fixed in logcheck 1.2.41
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 11 Jul 2005 08:17:18
+0000
>From sistemas at dedaloingenieros.com Mon Jul 11 01:17:17 2005
Return-path: <sistemas at dedaloingenieros.com>
Received: from master.debian.org [146.82.138.7] 
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1DrtTZ-0005xc-00; Mon, 11 Jul 2005 01:17:17 -0700
Received: from acuario.dedaloingenieros.com [217.11.123.114] 
	by master.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1DrtTX-0006do-00; Mon, 11 Jul 2005 03:17:15 -0500
Content-Type: multipart/mixed; boundary="===============1174839515=="
MIME-Version: 1.0
From: Administrador de Sistemas <sistemas at dedaloingenieros.com>
To: Debian Bug Tracking System <submit at bugs.debian.org>
Subject: logcheck-database: fails to ignore properly some lines from
'rbldnsd'
X-Mailer: reportbug 3.8
Date: Mon, 11 Jul 2005 10:17:01 +0200
X-Debbugs-Cc: sistemas at dedaloingenieros.com
Message-Id: <E1DrtTX-0006do-00 at master.debian.org>
Delivered-To: submit at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-9.0 required=4.0 tests=BAYES_00,HAS_PACKAGE,
	OUR_MTA_MSGID,X_DEBBUGS_CC autolearn=ham 
	version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

This is a multi-part MIME message sent by reportbug.

--===============1174839515=Content-Type: text/plain;
charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Package: logcheck-database
Version: 1.2.40
Severity: normal
Tags: patch

There are one line that is not properly ignored. I include in the report
a better version.

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (400, 'testing'), (300, 'unstable'), (200,
'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-k7
Locale: LANG=es_ES.UTF-8, LC_CTYPE=es_ES.UTF-8 (charmap=UTF-8)

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0]         1.4.30.13  Debian configuration management sy

-- debconf information:
  logcheck-database/conffile-cleanup: false
  logcheck-database/rules-directories-note:
  logcheck-database/standard-rename-note:

--===============1174839515=Content-Type: text/plain;
charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="rbldnsd"

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rbldnsd\[[0-9]+\]: listening on
[0-9.]{7,15}/[0-9]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rbldnsd\[[0-9]+\]: ip4set:[._[:alnum:]-]+:
[0-9]{8} [0-9]+: [[:alnum:]/=]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rbldnsd\[[0-9]+\]: zones reloaded, time
[\./[:alnum:]]+ sec, mem arena=[0-9]+ free=[0-9]+ mmap=[0-9]+ \w{1,2}$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rbldnsd\[[0-9]+\]: stats for [0-9]+secs zone
[._[:alnum:]-]+: tot=[0-9]+ ok=[0-9]+ nxd=[0-9]+ err=[0-9]+ in=[0-9]+
out=[0-9]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rbldnsd\[[0-9]+\]: stats for [0-9]+sec:
tot=[0-9]+ ok=[0-9]+ nxd=[0-9]+ err=[0-9]+ in=[0-9]+ out=[0-9]+$

--===============1174839515==--

---------------------------------------
Received: (at 317741-close) by bugs.debian.org; 22 Aug 2005 20:49:31
+0000
>From katie at spohr.debian.org Mon Aug 22 13:49:31 2005
Return-path: <katie at spohr.debian.org>
Received: from katie by spohr.debian.org with local (Exim 3.36 1 (Debian))
	id 1E7IyF-0002y7-00; Mon, 22 Aug 2005 13:32:39 -0700
From: Todd Troxell <ttroxell at debian.org>
To: 317741-close at bugs.debian.org
X-Katie: $Revision: 1.56 $
Subject: Bug#317741: fixed in logcheck 1.2.41
Message-Id: <E1E7IyF-0002y7-00 at spohr.debian.org>
Sender: Archive Administrator <katie at spohr.debian.org>
Date: Mon, 22 Aug 2005 13:32:39 -0700
Delivered-To: 317741-close at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-CrossAssassin-Score: 15

Source: logcheck
Source-Version: 1.2.41

We believe that the bug you reported is fixed in the latest version of
logcheck, which is due to be installed in the Debian FTP archive:

logcheck-database_1.2.41_all.deb
  to pool/main/l/logcheck/logcheck-database_1.2.41_all.deb
logcheck_1.2.41.dsc
  to pool/main/l/logcheck/logcheck_1.2.41.dsc
logcheck_1.2.41.tar.gz
  to pool/main/l/logcheck/logcheck_1.2.41.tar.gz
logcheck_1.2.41_all.deb
  to pool/main/l/logcheck/logcheck_1.2.41_all.deb
logtail_1.2.41_all.deb
  to pool/main/l/logcheck/logtail_1.2.41_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 317741 at bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Todd Troxell <ttroxell at debian.org> (supplier of updated logcheck
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster at debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Mon, 22 Aug 2005 15:27:45 -0500
Source: logcheck
Binary: logcheck logtail logcheck-database
Architecture: source all
Version: 1.2.41
Distribution: unstable
Urgency: low
Maintainer: Debian logcheck Team <logcheck-devel at
lists.alioth.debian.org>
Changed-By: Todd Troxell <ttroxell at debian.org>
Description: 
 logcheck   - mails anomalies in the system logfiles to the administrator
 logcheck-database - database of system log rules for the use of log checkers
 logtail    - Print log file lines that have not been read
Closes: 311216 312597 312598 312729 313601 313603 314951 315507 316612 317642
317741 317772 318500 318731 320009 321506 322036 322179 322570
Changes: 
 logcheck (1.2.41) unstable; urgency=low
 .
   [ Jamie Penman-Smithson ]
   * Fix postfix rule to match "setting up TLS connection" messages
again.
   * Fix innd rule for "ME time" messages, add rule for innfeed
"ME time"
     messages.
   * Fix rules for gps to match messages with the null sender (<>).
   * Update cyrus/notifyd rule to match destination folders and subfolders too.
   * Update cyrus rules to suppress DBERROR db3: n lockers messages when
it's
     only 1-2 lockers, these messages are harmless as long as the number
     doesn't increase.
   * Update postfix lmtp rule to match messages given by amavis when discarding
     UBE and viruses.
   * Fix bug in the squid rule for "found whitespace" messages which
caused
     grep to choke due to unescaped { and } characters. (Closes: #311216)
   * Update innd nnrpd rule for latest version of INN.
   * Add a versioned dependency on grep to prevent bugs like #311216 happening
     in the first place.
   * Added Vietnamese translation, thanks to Clytie Siddall. (Closes: #312597)
   * Fix minor typo in logcheck-database.templates. (Closes: #312598)
   * Modify rules for successful ssh login messages to match when ssh/ssh2 is
     not specified at the end. (Closes: #312729)
   * Modified ignore.d.workstation/kernel to ignore nfs warnings about mount
     version. (Closes: #313601)
   * Fix postfix anvil rules to match max message/recipient rate and count
     messages.
   * Add the first rules for dkfilter, which implements domainkeys signing and
     verification for postfix.
   * Add rule for openssh-krb5 and add gssapi-with-mic to the list of auth
     alternatives. (Closes: #318500)
   * Add ovpn-tunnel rule to suppress "VERIFY OK: nsCertType=SERVER"
messages.
     Thanks to Martin Lohmeier <martin at mein-horde.de>. (Closes:
#320009)
 .
   [ Maximilian Attems ]
   * Suppress error message if hostname not set. (Closes: #314951)
   * Add another sshd rule for PARANOID /etc/hosts.deny setting.
   * Fix postfix rule concerning Service unavailable. (Closes: #315507)
   * Add some initial support for exim4 log messages. Pretty rudimentary
     stuff still, will need further refinements. (Closes: #316612)
   * First rule for amandad. (Closes: #313603)
   * Remention how to invoke logcheck with sudo.
   * Add an examples section to the manpage with my most usual invocation.
   * Fix rules for gconfd loglines.
   * Add rule for mailman admin loglines in violations.ignore.d/logcheck-postfix
     thanks toby cabot <toby at caboteria.org>. (Closes: #317772)
   * Fix hostname match in rbldnsd rule thanks sistemas at dedaloingenieros.com.
     (Closes: #317741)
   * Unifiy gdm rules, add a rule for X restart.
   * Beautify README.logcheck-database, uses markdown(1) syntax now.
     Added testing rules header to carify sections. (Closes: #317642, #318731)
   * Small manpage fixes.
   * Add 2 courier rules for ACCEPTED usernames and the started client module.
   * Add pdns rule for duplicate packets from recursor.
   * Fix cvs rule for exit code != 0. thanks Martin Lohmeier
     <martin at mein-horde.de> (Closes: #321506)
   * Fix hostname match in cups-lpd rules thanks Gilbert Laycock
     <gtl1 at mcs.le.ac.uk> (Closes: #322179)
   * Add horde3 rules for users login/logout thanks Martin Lohmeier
     <martin at mein-horde.de> (Closes: #322570)
   * Fix logcheck.8 rendering of docbook-to-man. (Closes: #322036)
 .
   [Todd Troxell]
   * Tweak descriptions to satisfy litian.
Files: 
 1885143b4845e7da6dc748ef4f2ec7fb 736 admin optional logcheck_1.2.41.dsc
 1a946e45f82a0dc98838c896510dfca9 101085 admin optional logcheck_1.2.41.tar.gz
 4ec4e8c0a9227a8c06a716675f8a0d3f 47870 admin optional logcheck_1.2.41_all.deb
 3bf53f05bfb119af9e2c1da3c8130f12 67460 admin optional
logcheck-database_1.2.41_all.deb
 078148d37c693d7dd9511355d70e7d40 29826 admin optional logtail_1.2.41_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFDCijR4u3oQ3FHP2YRAjnTAJwL7ztRs3iUx4sltg+pROJaxdf/QgCgtall
nSanCABtCnyTfEYFeoyVZQ4=M6Pk
-----END PGP SIGNATURE-----