[Logcheck-devel] Bug#406179: logcheck-database: deamon name for openvpn is openvpn and not ovpn-...

[Alberto Gonzalez Iniesta]

On Tue, Jan 09, 2007 at 11:32:22AM +0100, Vincent Danjean wrote:
> The current rules for openvpn in ignore.d.server/openvpn use something
> as:
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ovpn-[._[:alnum:]-]\[[0-9]+\]: ...
> whereas I have in my syslog file :
> Jan  9 06:50:34 atsina openvpn[26524]: ...
> 
> I suggest to change all rules in ignore.d.server/openvpn in something
> as:
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (openvpn|(ovpn-[._[:alnum:]-]))\[[0-9]+\]: ...
> (it works for me)
> 
> I do not know when the openvpn deamon changes its name in the log, so I
> do not know if it is still needed to keep the ovpn-[._[:alnum:]-] part
> I cc the openvpn maintainer in case he knows.


Hi, your patch is correct. The name in the log depends on whether the
'daemon' option was specified or not in the configuration file. From the
init.d script:

    if grep -q '^[       ]*daemon' $CONFIG_DIR/$NAME.conf ; then
      # daemon already given in config file
      DAEMONARG=
    else
      # need to daemonize
      DAEMONARG="--daemon ovpn-$NAME"
    fi

Regards,

Alberto

-- 
Alberto Gonzalez Iniesta    | Formación, consultoría y soporte técnico
agi@(inittab.org|debian.org)| en GNU/Linux y software libre
Encrypted mail preferred    | http://inittab.com

Key fingerprint = 9782 04E7 2B75 405C F5E9  0C81 C514 AF8E 4BA4 01C3