[Logcheck-devel] Bug#213711: marked as done (missing ignore pattern for squid)

Debian Bug Tracking System owner at bugs.debian.org
Sat Jul 24 02:18:03 UTC 2004


Your message dated Fri, 23 Jul 2004 22:02:11 -0400
with message-id <E1BoBrX-0003wy-00 at newraff.debian.org>
and subject line Bug#213711: fixed in logcheck 1.2.24
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 2 Oct 2003 08:07:36 +0000
>From jmartin2002 at notamusica.com Thu Oct 02 03:07:36 2003
Return-path: <jmartin2002 at notamusica.com>
Received: from mailgate3.zdv.uni-mainz.de [134.93.130.78] 
	by master.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1A4yUp-0004l5-00; Thu, 02 Oct 2003 03:07:35 -0500
Received: from ipymzz.sowi.uni-mainz.de (ipymzz.Sowi.Uni-Mainz.DE [134.93.137.55])
	by mailgate3.zdv.Uni-Mainz.DE (8.12.10/8.12.8) with ESMTP id h9287Ych006784
	(version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NOT)
	for <submit at bugs.debian.org>; Thu, 2 Oct 2003 10:07:35 +0200 (MEST)
Received: from ipymzz.sowi.uni-mainz.de (jmartin at localhost [127.0.0.1])
	by ipymzz.sowi.uni-mainz.de (8.12.3/8.12.3/Debian-6.6) with ESMTP id h9287Ykx023983
	(version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO)
	for <submit at bugs.debian.org>; Thu, 2 Oct 2003 10:07:34 +0200
Received: from localhost (jmartin at localhost)
	by ipymzz.sowi.uni-mainz.de (8.12.3/8.12.3/Debian-6.6) with ESMTP id h9287YDq023979
	for <submit at bugs.debian.org>; Thu, 2 Oct 2003 10:07:34 +0200
X-Authentication-Warning: ipymzz.sowi.uni-mainz.de: jmartin owned process doing -bs
Date: Thu, 2 Oct 2003 10:07:34 +0200 (CEST)
From: Johannes Martin <jmartin2002 at notamusica.com>
X-X-Sender: jmartin at ipymzz.sowi.uni-mainz.de
To: Debian Bug Tracking System <submit at bugs.debian.org>
Subject: missing ignore pattern for squid
Message-ID: <Pine.LNX.4.56.0310021004380.20183 at ipymzz.sowi.uni-mainz.de>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Delivered-To: submit at bugs.debian.org
X-Spam-Status: No, hits=-6.5 required=4.0
	tests=BAYES_01,HAS_PACKAGE
	version=2.53-bugs.debian.org_2003_10_1
X-Spam-Level: 
X-Spam-Checker-Version: SpamAssassin 2.53-bugs.debian.org_2003_10_1 (1.174.2.15-2003-03-30-exp)

Package: logcheck-database
Version: 1.2.15

logcheck reports squid messages such as
	Oct  2 06:26:56 rih squid[19251]:     65536 entries written so far.
	Oct  2 06:27:08 rih squid[19251]: helperOpenServers: Starting 5 'squidGuard' processes

This is due to an omission in /etc/logcheck/ignore.d.server/squid. I
believe the following patch will fix the problem:
*** squid       Thu Aug  7 12:08:55 2003
--- squid.new   Thu Oct  2 10:03:57 2003
***************
*** 1,5 ****
--- 1,7 ----
  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: storeDirWriteCleanLogs: Starting\.\.\. $
+ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: [0-9 ]+ entries written so far\.
  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]:   Finished\.  Wrote [0-9]+ entries\. $
  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]:   Took [.0-9]+ seconds \([ .0-9]+ entries/sec\)\. $
  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: logfileRotate: /var/log/squid/store\.log $
  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: logfileRotate: /var/log/squid/access\.log $
+ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: helperOpenServers: Starting [0-9]+ 'squidGuard' processes$


---------------------------------------
Received: (at 213711-close) by bugs.debian.org; 24 Jul 2004 02:08:11 +0000
>From katie at ftp-master.debian.org Fri Jul 23 19:08:11 2004
Return-path: <katie at ftp-master.debian.org>
Received: from newraff.debian.org [208.185.25.31] (mail)
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1BoBxL-0000g5-00; Fri, 23 Jul 2004 19:08:11 -0700
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
	id 1BoBrX-0003wy-00; Fri, 23 Jul 2004 22:02:11 -0400
From: Todd Troxell <ttroxell at debian.org>
To: 213711-close at bugs.debian.org
X-Katie: $Revision: 1.51 $
Subject: Bug#213711: fixed in logcheck 1.2.24
Message-Id: <E1BoBrX-0003wy-00 at newraff.debian.org>
Sender: Archive Administrator <katie at ftp-master.debian.org>
Date: Fri, 23 Jul 2004 22:02:11 -0400
Delivered-To: 213711-close at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 
X-CrossAssassin-Score: 2

Source: logcheck
Source-Version: 1.2.24

We believe that the bug you reported is fixed in the latest version of
logcheck, which is due to be installed in the Debian FTP archive:

logcheck-database_1.2.24_all.deb
  to pool/main/l/logcheck/logcheck-database_1.2.24_all.deb
logcheck_1.2.24.dsc
  to pool/main/l/logcheck/logcheck_1.2.24.dsc
logcheck_1.2.24.tar.gz
  to pool/main/l/logcheck/logcheck_1.2.24.tar.gz
logcheck_1.2.24_all.deb
  to pool/main/l/logcheck/logcheck_1.2.24_all.deb
logtail_1.2.24_all.deb
  to pool/main/l/logcheck/logtail_1.2.24_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 213711 at bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Todd Troxell <ttroxell at debian.org> (supplier of updated logcheck package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster at debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Friday, 23 Jul 2004 21:39:19 -0500
Source: logcheck
Binary: logcheck logtail logcheck-database
Architecture: source all
Version: 1.2.24
Distribution: unstable
Urgency: low
Maintainer: Debian logcheck Team <logcheck-devel at lists.alioth.debian.org>
Changed-By: Todd Troxell <ttroxell at debian.org>
Description: 
 logcheck   - Mails anomalies in the system logfiles to the administrator
 logcheck-database - A database of system log rules for the use of log checkers
 logtail    - Print log file lines that have not been read
Closes: 206495 213711 257874 258735 258759 259092 259094 259371 259466 260096 260102 260103 260105 260330 260382 260810
Changes: 
 logcheck (1.2.24) unstable; urgency=low
 .
   eevans:
   * Added violations ignore rule for squid (Closes: #257874)
   maks
   * Added dhcpd-client, kernel, ntp, postfix rules. (Closes: #259094)
   * Added lots of postfix rules at level workstation for those,
     who wants to include /var/log/mail.log. (Closes: #206495)
   * Generalize "nobody" to "[_[:alnum:]-]+" for su rule.
   * Update rules ignore.d.paranoid/cron, ignore.d.paranoid/postfix.
     New courier rules merged and simplified from imap, impd-ssl and pop3d-ssl.
     thanks to Bastian Blank <waldi at debian.org>. (Closes: #258759)
   * Fix pid regex in cyrus rules. (Closes: #259092)
   * Added cyrus rules for notifyd. (Closes: #259466)
   * Make sure logtail gets a logfile to read, if not exit soon.
     Documented -o switch in logtail(8). (Closes: #259371)
   * Added logcheck-devel mail to logtail(8) and copyright.
   * Added userv rules. (Closes: #260105)
   * Generalize user match in spamd rule. (Closes: #260103)
   * Added a ippl rule at level workstation. (Closes: #260102)
   * Updated logcheck help message to all existent switches.
     Corrected logcheck command line parsing, -T needs no args.
     Use 6 'X' for mktemp(1) template. Better lock handling. (Closes: #260330)
   * Do not create unused /var/state/logcheck and really get rid of it.
     (Closes: #260096)
   * Added cs Translation. thanks Jan Outrata. (Closes: #260382)
   * Remove duplicate postfix rules, fix for remote string add lmtp rule.
     (Closes: #260810)
   todd:
   * Added 2 kernel rules for sparc workstations.
   * Added nearly 50 squid rules. (Closes: #213711)
   * Fix anacron Normal exit rule.
   * Move adduser from preinst to postinst (Closes: #258735)
   * Update pump and dhclient rules.
Files: 
 b12f7f6e9f7ee1c1ab93c11d06197436 670 admin optional logcheck_1.2.24.dsc
 fac761afff4056f62d05e0b0a49a8941 78439 admin optional logcheck_1.2.24.tar.gz
 b42736deefef2c9cbb27e596fe3453ca 38306 admin optional logcheck_1.2.24_all.deb
 544fe294c31535dae713ca94746030c4 45540 admin optional logcheck-database_1.2.24_all.deb
 ab277c25932c9ef600581ebb1aa8f68c 22412 admin optional logtail_1.2.24_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBAb4/4u3oQ3FHP2YRAteqAKDC5u2SOudNtfjaZvMM1gFdFIE1AQCfXBAm
nUk8s8a4rlxDrmTdK7SD5XI=
=XQO7
-----END PGP SIGNATURE-----





More information about the Logcheck-devel mailing list