Logcheck devel - Apr 2008 - Bug#477932: logcheck-database: bind with views - messages not filtered

Package: logcheck-database
Version: 1.2.54
Severity: normal
Tags: patch


When views are used in bind, the logcheck filters don't catch the common
informational log messages.

Added regex bits to the filter definitions.

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-6-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0]        1.5.11etch1 Debian configuration management sy

logcheck-database recommends no packages.

-- debconf information:
  logcheck-database/standard-rename-note:
  logcheck-database/conffile-cleanup: false
-------------- next part --------------
--- oldbind	2007-01-30 08:40:59.000000000 -0700
+++ bind	2008-04-25 13:45:26.000000000 -0600
@@ -1,5 +1,5 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: zone [._[:alnum:]-]+/IN:
transferred serial [0-9]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: (client [.#[:digit:]]+:
)?received notify for zone '[._[:alnum:]-]+'$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: zone
[._[:alnum:]-]+/IN(/[._[:alnum:]-]+)?: transferred serial [0-9]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: (client [.#[:digit:]]+:
)?(view [._[:alnum:]-]+: )?received notify for zone '[._[:alnum:]-]+'$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: unexpected RCODE
\((REFUSED|SERVFAIL)\) resolving '[^[:space:]]+': [.[:digit:]]+#[0-9]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: FORMERR resolving
'[^[:space:]]+': [.[:digit:]]+#[0-9]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: zone [._[:alnum:]-]+/IN:
Transfer started.$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: zone
[._[:alnum:]-]+/IN(/[._[:alnum:]-]+)?: Transfer started.$

Your message dated Tue, 03 Jun 2008 22:47:04 +0000
with message-id <E1K3fHU-0000Mj-OB at ries.debian.org>
and subject line Bug#477932: fixed in logcheck 1.2.64
has caused the Debian Bug report #477932,
regarding logcheck-database: bind with views - messages not filtered
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
477932: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=477932
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Shawn Heisey <debian at elyograg.org>
Subject: logcheck-database: bind with views - messages not filtered
Date: Fri, 25 Apr 2008 13:58:17 -0600
Size: 3838
Url:
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20080603/5f5ed5e9/attachment.eml
-------------- next part --------------
An embedded message was scrubbed...
From: maximilian attems <maks at debian.org>
Subject: Bug#477932: fixed in logcheck 1.2.64
Date: Tue, 03 Jun 2008 22:47:04 +0000
Size: 9508
Url:
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20080603/5f5ed5e9/attachment-0001.eml