[Logcheck-devel] Bug#508138: logcheck: loglines leakage
Paolo
oopla at users.sf.net
Mon Dec 8 08:43:01 UTC 2008
Package: logcheck
Version: 1.2.54
Severity: normal
hello,
seems that somehow logcheck fails to filter out some lines, eg i get this
warning:
Security Events
=-=-=-=-=-=-=-=
daemon.info: Dec 7 21:13:47 smartd[9668]: Device: /dev/hdb, SMART Prefailure Attribute: 1 Raw_Read_Error_Rate changed from 100 to 99
daemon.info: Dec 7 21:43:48 smartd[9668]: Device: /dev/hdb, SMART Prefailure Attribute: 1 Raw_Read_Error_Rate changed from 99 to 100
however:
# grep -h '21:13:4[78]' /var/log/socklog/main/*
Dec 7 21:13:47 smartd[9668]: Device: /dev/hdb, SMART Prefailure Attribute: 1 Raw_Read_Error_Rate changed from 100 to 99
Dec 7 21:13:47 smartd[9668]: Device: /dev/hdb, SMART Usage Attribute: 190 Temperature_Celsius changed from 58 to 59
Dec 7 21:13:47 smartd[9668]: Device: /dev/hdb, SMART Usage Attribute: 194 Temperature_Celsius changed from 42 to 41
Dec 7 21:13:47 smartd[9668]: Device: /dev/hdb, SMART Usage Attribute: 195 Hardware_ECC_Recovered changed from 72 to 73
and:
# grep -h '21:13:4[78]' /var/log/socklog/main/* | egrep -v -f /etc/logcheck/ignore.d.server/smartd
so the patterns in /etc.../smartd do match and logcheck run should end up
with no such lines.
# dpkg -s logcheck logtail lockfile-progs socklog-run|grep ^Vers
Version: 1.2.54
Version: 1.2.54
Version: 0.1.10
Version: 2.1.0-7
thanks
--
paolo
More information about the Logcheck-devel
mailing list