[Logcheck-devel] Bug#311216: logcheck: mails "egrep: Invalid content of \{\}"

[Jamie L. Penman-Smithson]

Hi John,

> Mail sent by logcheck
> 
> ,----
> From: root at lists.jamux.org (Cron Daemon)
> Subject: Cron <logcheck at lists>    if [ -x /usr/sbin/logcheck ]; then
> nice -n10 /usr/sbin/logcheck; fi
> To: root at lists.jamux.org
> Date: Sun, 29 May 2005 18:02:09 -0400 (EDT)
> 
> egrep: Invalid content of \{\}
> `----

I can't reproduce this at all, which makes me think there's something
different on your system that is causing this bug.

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: WARNING: found
whitespace in HTTP header name {Cache Control: no-cache}$

With this rule, egrep parses it fine:

D: [1117469713] cleanchecked - dir - /tmp/logcheck.fb7dSc/ignore/spamd
D: [1117469713] cleanchecked - dir - /tmp/logcheck.fb7dSc/ignore/squid
D: [1117469714] cleanchecked - dir - /tmp/logcheck.fb7dSc/ignore/ssh

However, since there is nothing to lose by escaping the {}'s, I've
modified that rule in CVS.

-j

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20050530/37c0ee5a/attachment.pgp