Bug#277635: [Logcheck-devel] Bug#277635: logcheck-database: spelling errors in samba check

maks attems debian at sternwelten.at
Thu Oct 21 17:40:58 UTC 2004


tags 277635 pending
tags 277635 moreinfo
thanks

On Thu, 21 Oct 2004, Wouter de Vries wrote:

> There is a spelling error in the file
> /etc/logcheck/ignore.d/server/samba
> 
> samba:^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nmbd\[[[:digit:]]+: connect
> from$
> samba:^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nmbd\[[[:digit:]]+: .* find_.*$
> 
> should be
> 
> samba:^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nmbd\[[[:digit:]]+\]: connect
> from$
> samba:^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nmbd\[[[:digit:]]+\]: .* find_.*$

fixed in current cvs.
the second rule is quite strange and very broad.
could you post some of the messages it is sense to suppores.

egrep '^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nmbd\[[[:digit:]]+\]: .* find_.*$' \
/var/log/syslog  | head -n 50 > loglines

thanks for sending in those.


--
maks






More information about the Logcheck-devel mailing list