Bug#270018: [Logcheck-devel] Bug#270018: logcheck-database: add Hylafax support

[Ross Boylan]

On Sun, Sep 19, 2004 at 12:25:45AM +0200, maks attems wrote:
> On Sat, 04 Sep 2004, Ross Boylan wrote:
> 
> > Package: logcheck-database
> > Version: 1.2.25
> > Severity: wishlist
> > 
> > It would be nice to add rules filtering out the typical messages from
> > hylafax, including its faxgetty program.  As a starting point, here
> > are the rules I use:
> > 
> > # this line is too specific, since it depends on my model of modem
> > FaxGetty\[[[:digit:]]+\]: +MODEM U.S. ROB
> > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ +FaxGetty\[[[:digit:]]+\]: +[._[:alnum:]-]+ modem: disable Class
> > FaxGetty\[[[:digit:]]+\]: +STATE CHANGE:
> > FaxGetty\[[[:digit:]]+\]: +ANSWER:
> > FaxGetty\[[[:digit:]]+\]: +CLOSE
> 
> those rules are far too generic to be included in the main package!
They were just intended as starting points.
I think the line starting ^\w{3} is OK, is that right?

> 
> when sending in rules please read:
>  /usr/share/doc/logcheck-database/README.logcheck-database.gz
> if not the apropriate logmessages also helps.
> 
> #270019 has same unanswered request.
> 
> 
Sample log lines:
Sep 18 10:05:19 wheat FaxGetty[1192]: MODEM U.S. ROBOTICS 56K VOICE INT V4.9.1 5601/
Sep 18 10:05:20 wheat FaxGetty[1192]: STATE CHANGE: LOCKWAIT -> RUNNING (timeout 30)
Sep 18 10:05:20 wheat FaxQueuer[678]: FIFO RECV "+ttyS0:RPcaf9c77f:ff"
Sep 18 10:05:20 wheat FaxQueuer[678]: MODEM ttyS0: READY, capabilities Pcaf9c77f:ff

# next line might qualify as something to report
# though that and the modem busy are quite normal in some configs (e.g., mine)
Sep 18 10:50:27 wheat FaxGetty[1192]: ANSWER: Can not lock modem device
Sep 18 10:50:27 wheat FaxGetty[1192]: STATE CHANGE: RUNNING -> LOCKWAIT (timeout 30)
Sep 18 10:50:27 wheat FaxQueuer[678]: FIFO RECV "+ttyS0:U"
Sep 18 10:50:27 wheat FaxQueuer[678]: MODEM ttyS0: BUSY

Aug 31 20:18:01 wheat FaxGetty[1106]: STATE CHANGE: RUNNING -> LISTENING

Unfortunately, I haven't sent a fax in a while, and I don't have any
samples around from that.