search for: logtail

Package: logtail Version: 1.2.33 Severity: normal Hi... Logtail should not output error messages to standard output, since this violates the principle of least surprise. In particular, my application was broken by the semantics of logtail changing in version 1.2.21 (when you added switches for the default argu...

Hi gang, While writing a script that uses logtail, I noticed that logtail assumes nothing interesting happened between its last invocation and the rotation, which means that exciting bits of data could be lost. This seems a bit dodgy (correct me if I'm wrong about how it works!) so I made a dodgy patch to logtail that checks for the existence...

hi before checking in that chown fix, i wanted you to take a look. tested on my workstation. basicaly the patch takes care that logtail saves the offset file with the correct permissions. when playing around lately with file tampering and those invoking logcheck as root. i got similar output to #253998 Alfie may point out that i should not invoke logcheck as root, but i better fix that before users complain. patch shameless copied...

Package: logtail Version: 1.2.52 Severity: normal Tags: patch Hi, When a logfile is rotated, logtail misses the lines logged between the last logtail run and the logfile rotation. The attached patch allows to set an alternate logfile that logtail tries to use as the old logfile if the inode has changed. It can be...

Package: logcheck Version: 1.2.58.0 Severity: wishlist Tags: patch The attached patch is the diff from current svn trunk to my svn branch zugschlus200707. It introduces a new binary package logtail2 with a new binary logtail2 which enhances logtail substantially. logtail2 can process rotated logs internally, which makes the code inside logcheck and other programs that use logtail2 easier to handle. Additionally, detection of rotated log files is done using a plug-in scheme which allows local...

Hello, I'm having this error: Warning: If you are seeing this message, your log files may not have been checked! Details: Could not run logtail or save output Check temporary directory: /tmp/logcheck.EIX3jp declare -x HOME="/var/lib/logcheck" declare -x LANG="en_US" declare -x LANGUAGE="en_US:en_GB:en" declare -x LOGNAME="logcheck" declare -x MAILTO="root" declare -x OLDPWD declare -x PAT...

# Automatically generated email from bts, devscripts version 2.10.35 # via tagpending # # logcheck (1.3.2) experimental; urgency=low # # * Apply patch from Jari Aalto for fixing package description paragraph # ordering by importence, thanks (closes: #499415) # package logcheck-database logtail logcheck tags 499415 + pending

...(1.3.2) experimental; urgency=low # # * Apply patch from Jari Aalto for fixing package description paragraph # ordering by importence, thanks (closes: #499415) # * Supress cron session closed messages too, thanks to Ferenc Wagner for # noticing (closes: #499393) # package logcheck-database logtail logcheck tags 499393 + pending tags 499415 + pending

...#452879). # * ignore.d.server/acpid: # - follow recent modifications in acpid log output; thanks to Arno Renevier # (closes: #450660). # * ignore.d.server/otrs: # - ignore OTRS CGI notices (closes: #450697). # * fix wording in header.txt (closes: #472937). package logcheck-database logtail logcheck tags 452879 + pending tags 450660 + pending tags 450697 + pending tags 472937 + pending tags 446310 + pending tags 451118 + pending

Package: logcheck Version: 1.2.41 Problem: Logcheck try to detect if log file have been rotate or not by file size way. Possible attack: - current log file (sizeA) - run logcheck, (logcheck/logtail put inode in offsetfile), offset=sizeA - [attacker run attack 1] - run logrotate - [attacker run attack 2] - run logcheck may don't detect the rotation and don't check the log for attack 1 duration. attack 1 : The real attack, this attack log will not be checked by logcheck if attack 2 run...

...for the patch (closes: #471936). # * ignore.d.server/dkim-filter # - ignore warnings about bad signature data; thanks to Clint Adams # (closes: #478334). # * If nail is not installed and MAILASATTACH is set, fall back to regular # method (closes: #479278). # package logcheck-database logtail logcheck tags 473619 + pending tags 478334 + pending tags 472368 + pending tags 474606 + pending tags 471936 + pending tags 479278 + pending

...ild state K; thanks to Ross Boylan (closes: #484328). # * ignore.d.server/ssh: # - ignore host-based auth logins; thanks to Tilman Koschnick # (closes: #483214) # * ignore.d.server/imapproxy: # - ignore failures to read from client socket (closes: #482523). # package logcheck-database logtail logcheck tags 487208 + pending tags 484546 + pending tags 482523 + pending tags 486440 + pending tags 484328 + pending tags 483214 + pending

Processing commands for control at bugs.debian.org: > # Automatically generated email from bts, devscripts version 2.9.20 > package logcheck logcheck-database logtail Ignoring bugs not assigned to: logcheck-database logtail logcheck > tags 354820 + pending Bug#354820: rules to filter out entries caused by ssh scanners Tags were: patch Tags added: pending > tags 355085 + pending Bug#355085: logcheck-database: Ignore smartd temperature messages within tole...

logtail is a great program but it is incomplete. Currently it has no iead about log rolls which is normally done by renaming files from log to log.1 then log.2 etc... logtail should on seeing a different inode, try to determine if the log was just rolled as normal, and output the remainer of that ro...

Package: logcheck wanted to work on #195935, but found a less than funny issue, easy to reproduce: * remove some lines in front of your logfile * invoke logcheck you'll get a big email with all not matching lines from that log. not setting that to high priority because you are getting also the newer loglines. don't know if i find time that weekend. wanted to document it anyways. a++

...xpect shortcircuit status in scan messages; thanks to Marc Sherman # (closes: #474239). # * ignore.d.server/upsd: # - ignore client connection messages (closes: #495923). # * violations.d/su: # - match both, user-root and user:root styles (closes: #491694). # package logcheck-database logtail logcheck tags 491694 + pending tags 474239 + pending tags 489172 + pending tags 494740 + pending tags 493066 + pending tags 495923 + pending tags 471072 + pending

Package: logtail Version: 1.2.68 Severity: normal Hi, logtail does not cleanly update from logtail2: $ sudo dpkg --install /var/cache/apt/archives/logtail_1.2.68_all.deb (Reading database ... 26564 files and directories currently installed.) Unpacking logtail (from .../logtail_1.2.68_all.deb) ... dpkg: error proc...

...ot;serving file from ..." rule (closes: #445069). # * ignore.d.server/postfix: # - Postfix considers that "-" can be part of a numeric hostname. # - ignore Postfix bad address syntax errors from postfix/error # (closes: #464896) (Russ Allbery) # package logcheck-database logtail logcheck tags 444097 + pending tags 445069 + pending tags 444096 + pending tags 445074 + pending tags 445046 + pending tags 464896 + pending tags 443881 + pending tags 445073 + pending tags 445072 + pending tags 444100 + pending

...lo everyone, I know this isn't strictly CentOS query, but I am hoping that someone here with more experience than myself might have some thoughts. I am trying to get a plugin working for Ganglia on a CentOS 5.5 box, in a testing environment. The plugin is for apache monitoring, called Ganglia-Logtailer. This plugin requires the executable /usr/bin/logtail in order to work. The only packages that have this executable, that I have been able to find, is part of the epel-testing repository in the logcheck package. When I try to install the package from that repository, it is missing the dependency,...

On Sat, 15 May 2004, CVS User ttroxell wrote: > if [ -f /etc/logcheck/header.txt ] ; then > - $CAT /etc/logcheck/header.txt >> $TMPDIR/report > + $CAT /etc/logcheck/header.txt >> $TMPDIR/report \ > + || error "Could not append header to $TMPDIR/report Disk full?" > fi > } > > @@ -152,7 +157,8 @@ > # Add a footer