[Logcheck-devel] Bug#592365: logcheck: ignore rules for transmission-daemon

[Nemo]

Package: logcheck
Version: 1.3.10
Severity: wishlist
Tags: patch


Hi, I've noticed that transmission-daemon (torrent downloader) is rather
verbose.

Example 1: this line appears approx every 2 minutes whilst the torrent
downloads (differing only by timestamp):

--
Aug  4 14:39:28 falcon transmission-daemon[2685]: Saved "/var/lib/transmission-daemon/info/resume/debian-505-amd64-businesscard.iso.a437cd5c17cc853d.resume" (bencode.c:1651)
--

And this appears every 2 minutes regardless. 
--
Aug  4 14:39:28 falcon transmission-daemon[2685]: Saved "/var/lib/transmission-daemon/info/stats.json" (bencode.c:1651)
--


similarly, there the following pairs appear regularly from the time the
torrent begins downloading, and continues all the time it is seeding.
These logs are in pairs, and for my observation, 4 lines per hour is
pretty constant. 

--
Aug  5 00:19:56 falcon transmission-daemon[2685]: debian-505-amd64-businesscard.iso Starting DHT announce (firewalled, 170 nodes) (tr-dht.c:669)
Aug  5 00:23:13 falcon transmission-daemon[2685]: debian-505-amd64-businesscard.iso DHT announce done (tr-dht.c:637)
Aug  5 00:46:27 falcon transmission-daemon[2685]: debian-505-amd64-businesscard.iso Starting DHT announce (firewalled, 171 nodes) (tr-dht.c:669)
Aug  5 00:50:45 falcon transmission-daemon[2685]: debian-505-amd64-businesscard.iso DHT announce done (tr-dht.c:637)
--


The following is my ignore.d.server/transmission-daemon file.
Two lines - the first filters the first two examples, the second filters
the second pair.

--
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ transmission-daemon\[[[:digit:]]+\]: Saved "/var/lib/transmission-daemon/info/.*" \(bencode.c:1651\)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ transmission-daemon\[[0-9]+\]: .* DHT announce .*\(tr-dht.c:(669|637)\)$
--

The effectiveness of these rules can be seen from:

falcon:/etc/logcheck/ignore.d.server# grep transmission-daemon /var/log/syslog.0 | wc -l
2446
falcon:/etc/logcheck/ignore.d.server# grep transmission-daemon /var/log/syslog.0 | egrep -v -f transmission-daemon | wc -l
131


cheers
.../Nemo



-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages logcheck depends on:
ii  adduser                       3.112      add and remove users and groups
ii  cron                          3.0pl1-113 process scheduling daemon
ii  lockfile-progs                0.1.15     Programs for locking and unlocking
ii  logtail                       1.3.10     Print log file lines that have not
ii  mime-construct                1.11       construct/send MIME messages from 
ii  postfix [mail-transport-agent 2.7.1-1    High-performance mail transport ag
ii  sysklogd [system-log-daemon]  1.5-5      System Logging Daemon

Versions of packages logcheck recommends:
ii  logcheck-database             1.3.10     database of system log rules for t

Versions of packages logcheck suggests:
ii  syslog-summary                1.14-1     summarize the contents of a syslog

-- Configuration Files:
/etc/cron.d/logcheck changed [not included]
/etc/logcheck/logcheck.conf [Errno 13] Permission denied: u'/etc/logcheck/logcheck.conf'
/etc/logcheck/logcheck.logfiles [Errno 13] Permission denied: u'/etc/logcheck/logcheck.logfiles'

-- no debconf information