[Logcheck-devel] Bug#324751: bind NSTATS output still being reported

David D. Kilzer ddkilzer at kilzer.net
Sun Aug 28 21:22:23 UTC 2005


On Sun, Aug 28, 2005 at 04:08:55PM -0500, David D. Kilzer wrote:
> Attached is a patch against logcheck-database-1.2.41 from unstable to
> add "NS" to the list of reported variables on the NSTATS line to ignore.

It helps if I attach the patch!

Dave
-------------- next part --------------
diff -u logcheck/ignore.d.paranoid/bind.orig logcheck/ignore.d.paranoid/bind
--- logcheck/ignore.d.paranoid/bind.orig	2004-07-08 22:03:11.000000000 -0500
+++ logcheck/ignore.d.paranoid/bind	2005-08-28 15:43:37.000000000 -0500
@@ -8,7 +8,7 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: zone transfer \(AXFR\) of [^[:space:]]+ to [^[:space:]]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: suppressing duplicate notify$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: USAGE [0-9]+ [0-9]+ CPU=[\.0-9]+u/[\.0-9]+s CHILDCPU=[\.0-9]+u/[\.0-9]+s$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: NSTATS [0-9]+ [0-9]+( (A|CNAME|SOA|PTR|MX|TXT|AAAA|38|IXFR|AXFR|ANY)=[0-9]+)+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: NSTATS [0-9]+ [0-9]+( (A|CNAME|SOA|NS|PTR|MX|TXT|AAAA|38|IXFR|AXFR|ANY)=[0-9]+)+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: XSTATS [0-9]+ [0-9]+( (RR|RNXD|RFwdR|RDupR|RFail|RFErr|RErr|RAXFR|RLame|ROpts|SSysQ|SAns|SFwdQ|SDupQ|SErr|RQ|RIQ|RFwdQ|RDupQ|RTCP|SFwdR|SFail|SFErr|SNaAns|SNXD|RUQ|RURQ|RUXFR|RUUpd)=[0-9]+)+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: lame server resolving '[^[:space:]]+' \(in '[^[:space:]]+'\?\): [\.0-9.]+#[0-9]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: Received NOTIFY answer$


More information about the Logcheck-devel mailing list