[Logcheck-devel] Bug#691258: Missing / in RE for "reducing the advertised EDNS UDP packet size"

[Loïc Minier]

Package: logcheck
Version: 1.3.15
Severity: minor
Tags: patch

        Hi,

Got this log from time to time in System Events:
Oct 23 13:48:16 pig2 named[28880]: success resolving '26.0/25.218.183.203.in-addr.arpa/PTR' (in '0/25.218.183.203.in-addr.arpa'?) after reducing the advertised EDNS UDP packet size to 512 octets

Changing the regexp for the "(in '...'?)" part from:
^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]-]+ named\[[0-9]+\]: success resolving '[^[:space:]]+' \(in '[.[:alnum:]-]+'\?\) after (disabling EDNS|reducing the advertised EDNS UDP packet size to 512 octets)$
to:
^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]-]+ named\[[0-9]+\]: success resolving '[^[:space:]]+' \(in '[/.[:alnum:]-]+'\?\) after (disabling EDNS|reducing the advertised EDNS UDP packet size to 512 octets)$

fixed it (note addition of a "/").

    Cheers,
-- 
Loïc Minier