[Logcheck-devel] Bug#303176: /etc/logcheck/ignore.d.server/bind: changed log message in bind9 9.3.1-2

Jamie L. Penman-Smithson jamie at silverdream.org
Thu Apr 7 21:16:14 UTC 2005


package logcheck-database
tags 303176 pending
thanks

On Tue, 2005-04-05 at 10:33 +0200, Stephan Niemz wrote:
> When upgrading bind9 from version 1:9.2.5-1 to 1:9.3.1-2, the syslog
> messages of the type
> 
> Apr  4 07:49:37 gauss named[2179]: received notify for zone '127.in-addr.arpa'
> 
> have changed to:
> 
> Apr  5 07:46:26 gauss named[29651]: client 127.0.0.1#34408: received notify for zone '127.in-addr.arpa'

I've changed the rule in CVS to:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: (client
[.#[:digit:]]+: )?received notify for zone '[._[:alnum:]-]+'$

Which matches against the log messages above.

Thanks for your bug report,

-- 
-jamie <jamie at silverdream.org> | spamtrap: spam at silverdream.org
 w: http://www.silverdream.org | p: sms at silverdream.org
 pgp key @ http://silverdream.org/~jps/pub.key
 21:30:02 up 17 min,  2 users,  load average: 2.65, 2.52, 1.58

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20050407/2263a9b8/attachment.pgp 


More information about the Logcheck-devel mailing list