[Logcheck-devel] Bug#341957: does not handle splitted amavisd-new loglines

[Marco Nenciarini]

Package: logcheck-database
Version: 1.2.42
Severity: normal

If you run amavisd-new on a mailing-list, messages with multiple
recipients can generate a very long log lines. These lines are
splitted like this (email addresses removed)

Dec  4 11:21:07 lorien amavis[10426]: (10426-06-6) Passed, <xxxxxxxxxxxxxxx at xxxxxxxxxxx> -> <xxxx at xxxxxxxxxxx>,<xxxxxxxx at xxxxxxxx>,<xxxxxxxxx at xxxxxxxx>,<xxxxxxxxxxxxxx at xxxxxxxx>,<xxxxxxx at xxxxxxxx>,<xxxxxx at xxxxxxxx>,<xxxx at xxxxxxxx>,<xxxxxxxxxx at xxxxxxxx>,<xxxx at xxxxxxx>,<xxxxxxxxxxxxx at xxxxxxxxxxxxxx>,<xxxxxx at xxxxxxxxxx>,<xxxxxxxxx at xxxxxxxxxxx>,<xxxxxx at xxxxxxxxxxx>,<xxxxxxxx at xxxxxxx>,<xxxxx at xxxxxxxxxxxx>,<xxx at xxxxxxxxxxxxxx>,<xxxxxx at xxxxxxxxxxxxxxxx>,<xxxxxxxx at xxxxxxxxxxx>,<xxxxxxxx at xxxxxxxxxxxx>,<xxxxxxxxxxx at xxxxxxxx>,<xxxxxxx at xxxxxxxx>,<xxxxxxxxxx at xxxxxxxx>,<xxxxxx at xxxxxxxx>,<xxxxxxxxxx at xxxxxxxx>,<xxxxxxxxxxxxxxx at xxxxxxxx>,<xxxxxxxxx at xxxxxxxx>,<xxxxxx at xxxxxxxx>,<xxxxxxxxxxxxxxxx at xxxxxxxx>,<xxxxxxxxxx at xxxxxxxx>,<xxxxxxx at xxxxxxxx>,<xxxxxx at xxxxxxxx>,<xxxxxxxxx at xxxxxx>,<xxxxxxxxxxxx at xxxxxxxxxxxxx>,<xxxxxxxxxxxxx at xxxxxxxxxxxxx>,<xxxxxxxxxx at xxxxxxxxxxxxx>,<xxxxxxxxx at xxxxxxxxxxxxx>,<xxxxx at xxxxxxxxxxxxx>,<xxxxxx at xxxxxxxxxxxxxxxxxxxx>,<xxxxx at xxxxxxxxxxxxxxx>,<xxxxxxx at xxxxxxx>,<xxxxxxxxx at xxxxxx>,<xxxxxxx at xxxxxxx...
Dec  4 11:21:07 lorien amavis[10426]: (10426-06-6) ....xx>,<xxxxxxxx at xxxxxxxxxx>,<xxxx at xxxxxxxx>,<xxxxxxx at xxxxxxxxxxx>,<xxxxxxxxx at xxxxxxxxxxx>,<xxxxxxxx at xxxxxxxxxxx>,<xxxxxxxx at xxxxxxxxxxx>,<xxxxxxxxxxxxxx at xxxxxxxxxxxx>,<xxxxx at xxxxxxxxx>, Message-ID: <xxxxxxxxxxxx at xxxxxxxxx>, Hits: -1.511

I think is enought to add:

amavis\[[0-9]+\]: +(\([-0-9]+\) +)?\.\.\.

to /etc/logcheck/ignore.d.server/amavisd-new

Best Regards

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-k7
Locale: LANG=it_IT.UTF-8 at euro, LC_CTYPE=it_IT.UTF-8 at euro (charmap=UTF-8)

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0]         1.4.30.13  Debian configuration management sy

-- debconf information:
  logcheck-database/conffile-cleanup: false
  logcheck-database/rules-directories-note:
  logcheck-database/standard-rename-note:

-- 
---------------------------------------------------------------------
|    Marco Nenciarini    | Debian/GNU Linux Developer - Plug Member |
| mnencia at prato.linux.it | http://www.prato.linux.it/~mnencia       |
---------------------------------------------------------------------
Key fingerprint = FED9 69C7 9E67 21F5 7D95  5270 6864 730D F095 E5E4

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20051204/454f6f68/attachment.pgp