[Logcheck-commits] r1433 - in logcheck/trunk: debian
rulefiles/linux/ignore.d.server
madduck at users.alioth.debian.org
madduck at users.alioth.debian.org
Wed Jan 10 18:48:04 CET 2007
Author: madduck
Date: 2007-01-10 18:48:04 +0100 (Wed, 10 Jan 2007)
New Revision: 1433
Modified:
logcheck/trunk/debian/changelog
logcheck/trunk/rulefiles/linux/ignore.d.server/squid
Log:
* ignore.d.server/squid: handle messages about unsupported messages with
any type (related to mldonkey) in a hackish way, due to locale mismatches
(see #350206).
Modified: logcheck/trunk/debian/changelog
===================================================================
--- logcheck/trunk/debian/changelog 2007-01-10 17:44:15 UTC (rev 1432)
+++ logcheck/trunk/debian/changelog 2007-01-10 17:48:04 UTC (rev 1433)
@@ -26,12 +26,16 @@
* ignore.d.server/spamd: ignore logger and server pid info messages.
* ignore.d.server/dovecot: ignore disconnection messages after login too.
-
+
* violation.ignore.d/ssh: ignore messages about illegal users with IPs
reverse resolved too.
- -- martin f. krafft <madduck at debian.org> Wed, 10 Jan 2007 18:43:39 +0100
+ * ignore.d.server/squid: handle messages about unsupported messages with
+ any type (related to mldonkey) in a hackish way, due to locale mismatches
+ (see #350206).
+ -- martin f. krafft <madduck at debian.org> Wed, 10 Jan 2007 18:46:59 +0100
+
logcheck (1.2.52) unstable; urgency=low
* ignore.d.server/dovecot: cleanup of dovecot filters to match some more
Modified: logcheck/trunk/rulefiles/linux/ignore.d.server/squid
===================================================================
--- logcheck/trunk/rulefiles/linux/ignore.d.server/squid 2007-01-10 17:44:15 UTC (rev 1432)
+++ logcheck/trunk/rulefiles/linux/ignore.d.server/squid 2007-01-10 17:48:04 UTC (rev 1433)
@@ -56,7 +56,8 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: aioSync: flushing pending I/O operations$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: aioSync: done$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: urlParse: URL too large \([[:digit:]]+ bytes\)$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: parseHttpRequest: Unsupported method '.*'$
+# next rule without $ at the end because of #350206 and locale mismatches with non-latin1 or non-ascii characters.
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: parseHttpRequest: Unsupported method
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: parseHttpRequest: Requestheader contains NULL characters$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: clientReadRequest: FD [[:digit:]]+ (\([.[:digit:]]{7,15}:[[:digit:]]{1,5}\) )?Invalid Request$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: WARNING: Closing client [.[:digit:]]{7,15} connection due to lifetime timeout$
More information about the Logcheck-commits
mailing list