[Logcheck-devel] Bug#422621: logcheck-database: kernel capi messages should be ignored

[Remi Letot]

Package: logcheck-database
Version: 1.2.54
Severity: normal

Hello,

I use a capi controler on my system, and each time it uses a channel it 
generates log messages which in turn generate logcheck reports.

The messages : (mail may break them)

May  7 10:40:48 eckmul kernel: capilib_new_ncci: kcapi: appl 2 ncci 
0x10101 up
May  7 10:40:58 eckmul kernel: kcapi: appl 2 ncci 0x10101 down

The logcheck ignore patterns (broken by mail) :

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: capilib_new_ncci: kcapi: appl 
[0-9]+ ncci 0x[12]0[12]0[12] up$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: kcapi: appl [0-9]+ ncci 
0x[12]0[12]0[12] down$

For my part it's a small system and I have nerver had an appl number 
higher than 3, but I think [0-9]+ could be generated by higher volume 
sites. Similarly, I have no idea what the ncci technically is, for me it 
obeys the pattern I give, but no warranty included :-)

Thanks,
-- 
Rémi


-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (990, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-4-k7
Locale: LANG=C, LC_CTYPE=fr_BE at euro (charmap=ISO-8859-15)

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0]         1.5.11     Debian configuration management sy

logcheck-database recommends no packages.

-- debconf information:
* logcheck-database/rules-directories-note:
* logcheck-database/standard-rename-note:
* logcheck-database/conffile-cleanup: true
* logcheck-database/security_level: server