[Logcheck-devel] Bug#366364: 366364: more logcheck patterns for spamassassin

[Ross Boylan]

I've added this line to ignore some chatter:
# See bug #353868
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]:( spamd:)? checking
message .+ for [._[:alnum:]-]+:[0-9]+\.? *$
well, that should all be one line.

There are many patterns currently on my system that don't seem to be on
the lists earlier for this bug.  Just in case that was an oversight,
I'll include them here:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]:( spamd:)?( info:)?
setuid to [._[:alnum:]-]+ succeeded *$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]:( spamd:)? processing
message .+ for [._[:alnum:]-]+:[0-9]+\.? *$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]:( spamd:)? connection
from [._[:alnum:]-]+ \[[.0-9]+\] at port [0-9]+ *$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]:( spamd:)? (clean
message|identified spam) \([-0-9.]+/[-0-9.]+\) for
[._[:alnum:]-]+:[0-9]+ in [0-9.]+ seconds, [0-9]+ bytes\. *$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]:( spamd:)? result:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]:( spamd:)? server hit
by SIGCHLD$

(I've deleted lines already mentioned in this bug report).
These are in ignore.d.paranoid.  There is also a file in
violations.ignore.d.

The "processing message" line may be an obsolete version of the
"checking message" pattern at the top of this message, or it may still
be relevant.  Bug #353868 advocates the use of checking and processing
as alternatives in the pattern.


-- 
Ross Boylan                                      wk:  (415) 514-8146
185 Berry St #5700                               ross at biostat.ucsf.edu
Dept of Epidemiology and Biostatistics           fax: (415) 514-8150
University of California, San Francisco
San Francisco, CA 94107-1739                     hm:  (415) 550-1062