[Logcheck-devel] Bug#286331: logcheck-database: Restart messages for spamd (when using rulesdujour)

[Marc Sherman]

Package: logcheck-database
Version: 1.2.31
Severity: wishlist
Tags: patch

I don't know if you want to include these rules in the logcheck-database
package; the log messages are caused by a local install at my site of
rulesdujour, which restarts spamd in the daily cron job when the
downloaded rules are updated.

The following messages are logged when this happens:
Dec 19 07:20:41 pyloric spamd[23676]: server killed by SIGTERM, shutting
down
Dec 19 07:20:43 pyloric root: spamd starting
Dec 19 07:20:58 pyloric spamd[679]: server started on port 783/tcp
(running version 2.64)

The patch is for /etc/logcheck/ignore.d.server/spamd.  I think you'll
want to make it more generic for the port/version numbers, though.

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-1-k7
Locale: LANG=en_CA, LC_CTYPE=en_CA (charmap=ISO-8859-1)

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0]         1.4.30.10  Debian configuration management sy

-- debconf information:
  logcheck-database/conffile-cleanup: false
  logcheck-database/rules-directories-note:
  logcheck-database/standard-rename-note:
-------------- next part --------------
--- spamd.orig	2004-11-09 03:27:08.000000000 -0500
+++ spamd	2004-12-19 10:37:02.000000000 -0500
@@ -3,3 +3,6 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: (checking|processing) message .* for [._[:alnum:]-]+:[0-9]+\.$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: clean message \([0-9.-]+/[0-9.]+\) for [._[:alnum:]-]+:[0-9]+ in [0-9.]+ seconds, [0-9]+ bytes\.$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: identified spam \([0-9.-]+/[0-9.]+\) for [._[:alnum:]-]+:[0-9]+ in [0-9.]+ seconds, [0-9]+ bytes\.$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: server killed by SIGTERM, shutting down$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: server started on port 783/tcp (running version 2.64)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ root: spamd starting$