Marco Nenciarini
2005-Dec-04 12:58 UTC
[Logcheck-devel] Bug#341957: does not handle splitted amavisd-new loglines
Package: logcheck-database Version: 1.2.42 Severity: normal If you run amavisd-new on a mailing-list, messages with multiple recipients can generate a very long log lines. These lines are splitted like this (email addresses removed) Dec 4 11:21:07 lorien amavis[10426]: (10426-06-6) Passed, <xxxxxxxxxxxxxxx at xxxxxxxxxxx> -> <xxxx at xxxxxxxxxxx>,<xxxxxxxx at xxxxxxxx>,<xxxxxxxxx at xxxxxxxx>,<xxxxxxxxxxxxxx at xxxxxxxx>,<xxxxxxx at xxxxxxxx>,<xxxxxx at xxxxxxxx>,<xxxx at xxxxxxxx>,<xxxxxxxxxx at xxxxxxxx>,<xxxx at xxxxxxx>,<xxxxxxxxxxxxx at xxxxxxxxxxxxxx>,<xxxxxx at xxxxxxxxxx>,<xxxxxxxxx at xxxxxxxxxxx>,<xxxxxx at xxxxxxxxxxx>,<xxxxxxxx at xxxxxxx>,<xxxxx at xxxxxxxxxxxx>,<xxx at xxxxxxxxxxxxxx>,<xxxxxx at xxxxxxxxxxxxxxxx>,<xxxxxxxx at xxxxxxxxxxx>,<xxxxxxxx at xxxxxxxxxxxx>,<xxxxxxxxxxx at xxxxxxxx>,<xxxxxxx at xxxxxxxx>,<xxxxxxxxxx at xxxxxxxx>,<xxxxxx at xxxxxxxx>,<xxxxxxxxxx at xxxxxxxx>,<xxxxxxxxxxxxxxx at xxxxxxxx>,<xxxxxxxxx at xxxxxxxx>,<xxxxxx at xxxxxxxx>,<xxxxxxxxxxxxxxxx at xxxxxxxx>,<xxxxxxxxxx at xxxxxxxx>,<xxxxxxx at xxxxxxxx>,<xxxxxx at xxxxxxxx>,<xxxxxxxxx at xxxxxx>,<xxxxxxxxxxxx at xxxxxxxxxxxxx>,<xxxxxxxxxxxxx at xxxxxxxxxxxxx>,<xxxxxxxxxx at xxxxxxxxxxxxx>,<xxxxxxxxx at xxxxxxxxxxxxx>,<xxxxx at xxxxxxxxxxxxx>,<xxxxxx at xxxxxxxxxxxxxxxxxxxx>,<xxxxx at xxxxxxxxxxxxxxx>,<xxxxxxx at xxxxxxx>,<xxxxxxxxx at xxxxxx>,<xxxxxxx at xxxxxxx... Dec 4 11:21:07 lorien amavis[10426]: (10426-06-6) ....xx>,<xxxxxxxx at xxxxxxxxxx>,<xxxx at xxxxxxxx>,<xxxxxxx at xxxxxxxxxxx>,<xxxxxxxxx at xxxxxxxxxxx>,<xxxxxxxx at xxxxxxxxxxx>,<xxxxxxxx at xxxxxxxxxxx>,<xxxxxxxxxxxxxx at xxxxxxxxxxxx>,<xxxxx at xxxxxxxxx>, Message-ID: <xxxxxxxxxxxx at xxxxxxxxx>, Hits: -1.511 I think is enought to add: amavis\[[0-9]+\]: +(\([-0-9]+\) +)?\.\.\. to /etc/logcheck/ignore.d.server/amavisd-new Best Regards -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.8-2-k7 Locale: LANG=it_IT.UTF-8 at euro, LC_CTYPE=it_IT.UTF-8 at euro (charmap=UTF-8) Versions of packages logcheck-database depends on: ii debconf [debconf-2.0] 1.4.30.13 Debian configuration management sy -- debconf information: logcheck-database/conffile-cleanup: false logcheck-database/rules-directories-note: logcheck-database/standard-rename-note: -- --------------------------------------------------------------------- | Marco Nenciarini | Debian/GNU Linux Developer - Plug Member | | mnencia at prato.linux.it | http://www.prato.linux.it/~mnencia | --------------------------------------------------------------------- Key fingerprint = FED9 69C7 9E67 21F5 7D95 5270 6864 730D F095 E5E4 -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20051204/454f6f68/attachment.pgp
Jamie L. Penman-Smithson
2006-Feb-12 23:53 UTC
Bug#341957: [Logcheck-devel] Bug#341957: does not handle splitted amavisd-new loglines
reassign 341957 amavisd-new retitle 341957 amavisd-new: logcheck rules don't match split log lines thanks On 4 Dec 2005, at 12:58, Marco Nenciarini wrote:> If you run amavisd-new on a mailing-list, messages with multiple > recipients can generate a very long log lines. These lines are > splitted like this (email addresses removed) > > Dec 4 11:21:07 lorien amavis[10426]: (10426-06-6) Passed, > <xxxxxxxxxxxxxxx at xxxxxxxxxxx> -> > <xxxx at xxxxxxxxxxx>,<xxxxxxxx at xxxxxxxx>,<xxxxxxxxx at xxxxxxxx>,<xxxxxxxxx > xxxxx at xxxxxxxx>,<xxxxxxx at xxxxxxxx>,<xxxxxx at xxxxxxxx>,<xxxx at xxxxxxxx>,< > xxxxxxxxxx at xxxxxxxx>,<xxxx at xxxxxxx>,<xxxxxxxxxxxxx at xxxxxxxxxxxxxx>,<xx > xxxx at xxxxxxxxxx>,<xxxxxxxxx at xxxxxxxxxxx>,<xxxxxx at xxxxxxxxxxx>,<xxxxxxx > x at xxxxxxx>,<xxxxx at xxxxxxxxxxxx>,<xxx at xxxxxxxxxxxxxx><snip>> I think is enought to add: > > amavis\[[0-9]+\]: +(\([-0-9]+\) +)?\.\.\.<snip> This is far too broad. The amavisd-new rules are supplied by the amavisd-new package, therefore I'm reassigning this bug to amavisd-new. -j -- -Jamie L. Penman-Smithson <jamie at silverdream.org> t: +44 1273 424795; f: +44 1273 424795 PGP: C0A7 955E EED6 A309 23D7 863B C76A 26A3 F0DC FCA8 never send mail to: oubliette.z at gmail.com -------------- next part -------------- A non-text attachment was scrubbed... Name: PGP.sig Type: application/pgp-signature Size: 186 bytes Desc: This is a digitally signed message part Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20060212/e41213ce/attachment.pgp