[Logcheck-commits] r1433 - in logcheck/trunk: debian rulefiles/linux/ignore.d.server

madduck at users.alioth.debian.org madduck at users.alioth.debian.org
Wed Jan 10 18:48:04 CET 2007


Author: madduck
Date: 2007-01-10 18:48:04 +0100 (Wed, 10 Jan 2007)
New Revision: 1433

Modified:
   logcheck/trunk/debian/changelog
   logcheck/trunk/rulefiles/linux/ignore.d.server/squid
Log:
* ignore.d.server/squid: handle messages about unsupported messages with
  any type (related to mldonkey) in a hackish way, due to locale mismatches
  (see #350206).

Modified: logcheck/trunk/debian/changelog
===================================================================
--- logcheck/trunk/debian/changelog	2007-01-10 17:44:15 UTC (rev 1432)
+++ logcheck/trunk/debian/changelog	2007-01-10 17:48:04 UTC (rev 1433)
@@ -26,12 +26,16 @@
   * ignore.d.server/spamd: ignore logger and server pid info messages.
 
   * ignore.d.server/dovecot: ignore disconnection messages after login too.
-  
+
   * violation.ignore.d/ssh: ignore messages about illegal users with IPs
     reverse resolved too.
 
- -- martin f. krafft <madduck at debian.org>  Wed, 10 Jan 2007 18:43:39 +0100
+  * ignore.d.server/squid: handle messages about unsupported messages with
+    any type (related to mldonkey) in a hackish way, due to locale mismatches
+    (see #350206).
 
+ -- martin f. krafft <madduck at debian.org>  Wed, 10 Jan 2007 18:46:59 +0100
+
 logcheck (1.2.52) unstable; urgency=low
 
   * ignore.d.server/dovecot: cleanup of dovecot filters to match some more

Modified: logcheck/trunk/rulefiles/linux/ignore.d.server/squid
===================================================================
--- logcheck/trunk/rulefiles/linux/ignore.d.server/squid	2007-01-10 17:44:15 UTC (rev 1432)
+++ logcheck/trunk/rulefiles/linux/ignore.d.server/squid	2007-01-10 17:48:04 UTC (rev 1433)
@@ -56,7 +56,8 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: aioSync: flushing pending I/O operations$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: aioSync: done$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: urlParse: URL too large \([[:digit:]]+ bytes\)$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: parseHttpRequest: Unsupported method '.*'$
+# next rule without $ at the end because of #350206 and locale mismatches with non-latin1 or non-ascii characters.
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: parseHttpRequest: Unsupported method 
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: parseHttpRequest: Requestheader contains NULL characters$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: clientReadRequest: FD [[:digit:]]+ (\([.[:digit:]]{7,15}:[[:digit:]]{1,5}\) )?Invalid Request$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: WARNING: Closing client [.[:digit:]]{7,15} connection due to lifetime timeout$




More information about the Logcheck-commits mailing list